Alcassoft's SOPHIA CMS - SQL Injection

Author: p0pc0rn
type: webapps
platform: cfm
port: 0
date_added: 2011-02-24
date_updated: 2011-02-24
verified: 1
codes: OSVDB-71076
tags: 
aliases: 
screenshot_url: 
application_url: 

Title    : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection
Found by: p0pc0rn 24/02/2011
Web        : http://www.alcassoft.com/site/
Dork    : intext:"Powered by Alcassoft SOPHIA"

SQL
---

http://site.com/path/dsp_page.cfm?pageid=[SQL]
↑