CMS Contentia (news.php) SQL Injection Vulnerability

vendor:

CMS Contentia

by:

GlaDiaT0R

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: CMS Contentia

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

CMS Contentia (news.php) SQL Injection Vulnerability

A SQL injection vulnerability exists in CMS Contentia (news.php) which allows an attacker to execute arbitrary SQL commands on the underlying database.

Mitigation:

Input validation should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

##############################################################################
# [+]Title: [CMS Contentia (news.php) SQL Injection Vulnerability]
##############################################################################
# [+] About :
##############################################################################
# Author :  GlaDiaT0R  
# Contact: the_gl4di4t0r[AT]hotmail[DOT]com or berrahal.ryadh[AT]gmail[DOT]com
# Team :  Tunisian Power Team 
# Greetz : ALLAH ! , Boomrang_victim, Marwen_Neo, Alphanix, Zigma & my friends
##############################################################################
# Software Link: http://www.jmc.pl/rozwiazania_cms.php
# Google dork : Ennay! In ur dreams
# Category:  webapps/0day 
##############################################################################


=======================

Poc : http://localhost/news.php?id=[SQLi]

=======================





###########################################
Notice: I'M MUSLIM
###########################################