PARSADEV CMS SQL Injection Vulnerabilty

2014.11.02
Credit: jsass
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89
Dork: \"Powered by PARSADEV\"

# Exploit Title: PARSADEV CMS - SQL Injection Vulnerabilty # Date : 02-11-2014 # Author : jsass # Software Link:​ http://www.parsadev.com # Tested on: kali linux # Twitter : @KwSecurity # Group : Q8 GRAY HAT TEAM # Xss by IeDb http://www.exploit4arab.net/exploits/1168 ########### Exploit : http://localhost/iranian/?c=content&sid=1[Sql injection] Exploit http://localhost/iranian/?c=fanbazar&a=showData&bid=1[Sql injection] Admin Login : admin/login.php Demo http://techXart.ir/en/?c=fanbazar&a=showData&bid=20&did=3712%27 http://pXXac.org.ir/fa/?c=content&sid=45%27 Bye .. ########### # Greats : alm3refh.com & Sec4ever.com


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top