full-disclosure - Comnexx Content Management System SQL Injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 23 Jul 2011 19:17:00 +0700
From: cyber netron <cybernetron@...il.com>
To: full-disclosure@...ts.grok.org.uk, 
	full-disclosure-bounces@...ts.grok.org.uk, 
	full-disclosure-request@...ts.grok.org.uk, submit <submit@...sec.com>, 
	mr.inj3ct0r@...il.com, root@...loit-id.com, 
	submissions@...ketstormsecurity.org
Subject: Comnexx Content Management System SQL Injection

Comnexx Content Management System SQL Injection
=========================================================
# Exploit Title : Comnexx CMS SQL Injection
# Date : 17 July 2011
# Author : Netrondoank aka netron
# Platform/Tested on: Linux
# myweb : http://www.ilmuhacker.org
# Version : none
# Software Link: : http://www.comnexx.com/
# dork : "Powered By COMNEXX"
======================================================================

# vuln here
http://site/path/productdetail.php?id=&pid=104&langid=[sqli]


Login Admin
http://site/admin/

Spesial thanks to all friend @ site : IndonesianSecurity.info +
palembang Hackerlink + Blitar hackerlink + hacker newbie
+ Kimmmonosz + Budi anja (biohazzard ) + Klicak + jos ali joe + Pokeng +
Crashblack + nesta + andy_william

Content of type "text/html" skipped

Download attachment "Comnexx Content Management System SQL Injection" of type "application/octet-stream" (792 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/