Home / os / win7

Site! Professional Edition 2.1 CMS SQL Injection Vulnerabili

Posted on 22 July 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Site! Professional Edition 2.1 CMS SQL Injection Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==============================================================
Site! Professional Edition 2.1 CMS SQL Injection Vulnerability
==============================================================

Author : Darkzzzz , poni
Email : ferdianelli@yahoo.com
Date : 22 July 2010
web : http://forum.xcode.or.id

[0x00] Informations :
# Discovered : Darkzzzz , poni
# Homepage : http://forum.xcode.or.id
# Product : CMS Site! Professional Edition 2.1
# Vendor Site : http://www.assolo.net
# Vulnerability : SQL Injection
# Dork : inurl:/index.php?node= &amp;lng=

[0x01] SQL Injections :
# POC : http://www.site.com/index.php?node=xxx&amp;lng=x[SQLi]
# Demo : http://www.collinadoro.com/index.php?node=51&amp;lng=1[SQLi]


[0x02] Thanks &amp; Greetz :
# inj3ct0r.com, All XCode-Yogyafree-Yogya Family Code staff,
# serverisdown.org, ssteam.ws, codenesia.com,
# hacker-newbie.org, YogyaCarderlink.web.id, devilzc0de.org,
# indonesianhacker.or.id


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-07-22]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :