attractweb Cms Sql Injection Vulnerabilities

2012.05.20
Credit: Am!r
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89

######################################################## # # Exploit Title : attractweb Cms Sql Injection Vulnerabilities # # Author : IrIsT Security Team - BHG Security Center # # Discovered By : Am!r # # Home : http://IrIsT.Ir - http://Black-hg.Org # # Software Link : http://www.attractweb.com/ # # Security Risk : High # # Version : All Version # # Tested on : GNU/Linux Ubuntu - Windows Server - win7 # # Dork : "Site by Attraction Website Design" # ######################################################## # # Expl0iTs : # # [TarGeT]/event.php?id=[Sql] # ######################################################### # # D3M0 : # # runningmyraces.com/event.php?id=189[Sql] # ######################################################### # # Special Thanks To : Net.Edit0r - 3H34N - A.Cr0x - 4M!N - ArYaIeIrAN - # # G3n3rall - Mr.XHat - Bl4ck.Viper - Dj.TiniVini - B3Hz4d - Crim3R - d3c0d3r - # # R3ZA BLACK HAT - F@rid - skote_vahshat - H4x0r - dr.tofan ... # ######################################################### # # GreetZ : All Active Member in #BHG Security Center & IrIsT.Ir # #########################################################

References:

http://Black-hg.Org
http://IrIsT.Ir


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top