StyleDesign CMS SQL Injection

2012.06.06

Credit: s3ri0s bl@ck

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Dork: intext:\"Dise?o StyleDesign\" OR intext:\"Programaci?n Styledesign\"

#######################################################################################
#
# Exploit Title : styledesign Cms Sql Injection Vulnerabilitiy
#
# Author : MiHaNHaCK.Com
#
# Discovered By : s3ri0s bl@ck
#
# Home : http://MiHaNHaCK.Com
#
# Software Link : http://www.styledesign.com.ar/
#
# Security Risk : High
#
# Version : All Version
#
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
#
# Dork : intext:"Dise?o StyleDesign" Or intext:"Programaci?n Styledesign"
#
#######################################################################################
#
# Expl0iTs :
#
# [TarGeT]/detalles.php?cp=[Sql]
#
#
# D3m0:
#
# http://cgift.com.ar/detalles.php?cp=232[Sql]
#
# http://libreriadelsursh.com.ar/detalles.php?cp=23[Sql]
#
#######################################################################################
#
# Greats : All Members In IrIsT.Ir & Mihanhack.com
#
#######################################################################################

References:

intext:"Dise?o StyleDesign" Or intext:"Programaci?n Styledesign"

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

StyleDesign CMS SQL Injection

Dork: intext:\"Dise?o StyleDesign\" OR intext:\"Programaci?n Styledesign\"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.