Lucene search
+L

mediaforce CMS SQL Injection Vulnerability

🗓️ 02 Nov 2010 00:00:00Reported by cyberlogType 
zdt
 zdt
🔗 0day.today👁 39 Views

mediaforce CMS SQL Injection Vulnerability, discovered by cyberlog, allows unauthorized access to administrator account and access level informatio

Code
==========================================
mediaforce CMS SQL Injection Vulnerability
==========================================


Special to r0073r a.k.a Inj3ct0r.com, may this is the last my exploit, after that i'm going to resign from inj3ct0r m3mb3r,
because I have another jobs that aren't on professional audit web field.
I hope the inj3ct0r can success like milw0rm even more & Sekuritionline can be your partner.
Thanks for education that i have from this site

adi a.k.a cyberlog a.k.a sekuritionline

__                  __             
.----..--.--.|  |--..-----..----.|  |.-----..-----.
|  __||  |  ||  _  ||  -__||   _||  ||  _  ||  _  |
|____||___  ||_____||_____||__|  |__||_____||___  |
|_____|                               |_____|

####################################################

#  mediaforce CMS SQL Injection Vulnerability

####################################################
# Vendor	: http://www.mediaforce.ca
# prices	: Not Yet:P
# Discovered by : cyberlog
# Site          : Sekuritionline.net
# Channel       : #SekuritiOnline  & #Bajingan [ Now Just My Bot ]

# Dork          : "index_f.php?page= "Powered by Website Design by Mediaforce" or U can modification :P


# Exploit       : [site]/index_f.php?= [SQL Injection]

		  
# Thanks        : GOD,r0073r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz,
jayoes,thesims,setiawan,irvian,EA_Angel,BlueSpy,SoEy,A-technique,Jantap,KiLL,blindboy,sukam,
SarifJedul,wiro_gendenk,Letjen,ridho_bugs,Ryan_Kabrutz,aurel666,Inof,dbanie, GuA_NinOx, [email protected], marlon_inside

# special to Mama Sri Rahayu, Member& Staff Sekuritonline,Inj3ct0r, H4ckb0x,JatimCr3w,ManadoCoding Friends, Bajingan Crew,
# C0li a.k.a antisecurity [ pinjem script perl-na ] 
# Hiroyuki Doni thanks to create New design SO T-shirt P
# Inj3ct0r Now Brothers with Sekuritionline


####################################################
# Demo offline:
# http://localhost/index_f.php?page= [SQL Injection]

# demo online :
# http://www.bouletboots.com/index_f.php?page=12
# Result : administrator, access level: XA1579, passwd staff: 911e5c48ddc066cf6114138ac4fc26e5


####################################################



We never die !!!! indonesian Underground Community
!!!!! anjing buat oknum Pemerintah yang suka nilep uang rakyat !!!
!!!!! anjing juga buat admin site indon3sia yang merasa sok h3bat, dikasih tahu ada hole malah nyolot !!!!!
Give me NOCAN Brothers
am nt hacker just Lik3 Syst3m S3curity
###################################################################################################################
# Berjalanlah dengan penuh keyakinan !! cyberlog was here
#####################################################################################################################

.-----..-----.|  |--..--.--..----.|__||  |_ |__|.-----..-----.|  ||__|.-----..-----.
|__ --||  -__||    < |  |  ||   _||  ||   _||  ||  _  ||     ||  ||  ||     ||  -__|
|_____||_____||__|__||_____||__|  |__||____||__||_____||__|__||__||__||__|__||_____|



#  0day.today [2018-03-28]  #

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Nov 2010 00:00Current
7.1High risk
Vulners AI Score7.1
39