Hewmedia CMS SQL Injection Vulnerability

========================================
Hewmedia CMS SQL Injection Vulnerability
========================================


################################################################
##                                                            ##
# Exploit Title: [Hewmedia CMS SQL Injection Vulnerability]    #
# Date: [02-09-2010]                                           #
# Author: [Harakiri]                                           #
# Software Link: [http://www.hewmedia.com]                     #
# Version: [N/A]                                               #
# Tested on: [Win XP SP2]                                      #
# category: [webapps/0day]                                     #
#                                                              #
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
#                                                              #
# Dorks:[inurl:descargaArchivo.php?id=]                        #
#       [inurl:verVideo.php?id=]                               #
#       [inurl:VerDescripcion.php?id=]                         #
#                                                              #
# Bug :                                                        #
#    http://www.web.com/path/descargaArchivo.php?id= [SQLi]    #
##                                                            ##
################################################################
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all of the cases the injection type is integer and the passwords are not shadow'd ;D
Enjoy bitchs!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GREETZ: http://www.Remoteexecution.info/foro
& big hugs to my bitchs ~ Fakedo0r $ FR34K $ Kikoarg $ shodan $ warhack $ vodka ~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



#  0day.today [2018-01-04]  #