Neudimenxion CMS SQL Injection

cyber netron <[email protected]>
Newsgroups gmane.comp.security.full-disclosure,gmane.comp.security.web-applications
Message-ID <CAJttGj=Bs1Tz+5Mf7Fmh2gO-pdP=ggeeNThTX4gFAYaEa37r3A@mail.gmail.com>
=========================================================
# Exploit Title : Neudimenxion CMS SQL Injection
# Date : 17 July 2011
# Author : Netrondoank aka netron
# Platform/Tested on: Linux
# myweb : http://www.ilmuhacker.org
# Version : none
# Software Link: : http://www.neudimenxion.com/
# dork : "CMS © Neudimenxion.com"
======================================================================

# vuln here
http://site/path/directories_detail.php?id=[sqli]

# Login Admin here
http://site/admin_login.php

======================================================================
[+] Spesial thanks to all friend @ site : IndonesianSecurity.info +
palembang Hackerlink + Blitar hackerlink + hacker newbie
[+ ]Kimmmonosz + Budi anja (biohazzard ) + Klicak +  jos ali joe + Pokeng +
Crashblack + nesta + andy_william

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
new advisory proof on concept Neudimenxion CMS SQL Injection.txt (text/plain, 840 B)
=========================================================
# Exploit Title : Neudimenxion CMS SQL Injection
# Date : 17 July 2011
# Author : Netrondoank aka netron
# Platform/Tested on: Linux
# myweb : http://www.ilmuhacker.org
# Version : none
# Software Link: : http://www.neudimenxion.com/
# dork : "CMS © Neudimenxion.com"
======================================================================

# vuln here
http://site/path/directories_detail.php?id=[sqli]

# Login Admin here
http://site/admin_login.php

======================================================================
[+] Spesial thanks to all friend @ site : IndonesianSecurity.info +
palembang Hackerlink + Blitar hackerlink + hacker newbie
[+ ]Kimmmonosz + Budi anja (biohazzard ) + Klicak +  jos ali joe + Pokeng + Crashblack + nesta + andy_william
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.