Exploit Contrexx CMS egov Module 1.0.0 - SQL Injection

[Exploiter]

EDB-ID

40366

Проверка EDB

1. Пройдено

Автор

HAMIDREZA BORGHEI

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2016-09-13

Contrexx CMS egov Module 1.0.0 - SQL Injection

# Exploit Title: Contrexx CMS:egov moudle SQL injection
# Google Dork: inurl:?section=egov
# Date: 12/9/2016
# Exploit Author: hamidreza borghei
# Software Link: https://www.cloudrexx.com/de/index.php?section=downloads&cmd=7&category=8
# Version: 1.0.0
# Tested on: linux

sql injection in id parameter:

http://server/index.php?section=egov&cmd=details&id=[sql query]