[Webapps] - WEB-Source [Local File Inclusion Vulnerability]

'||     '||''''| |''||''| 
 ||      ||  .      ||    
 ||      ||''|      ||    
 ||      ||         ||    
.||...| .||.     |..||..| 

[ Local  File Inclusion ]

By MetalSoft T34M


; Distribuidor : web-source.ie

; Path: index.php?pid=[explotación]

; Author: b4nz0k

; Capura:


Z4LuD0$...

[Webapps] - TresIdeas CMS Vulnerable [SQLi]

  _       __    __  _                          
 /  |\/| (_    (_  / \ |    o ._  o  _   _ _|_ 
 \_ |  | __)   __) \_X |_   | | | | (/_ (_  |_ 
                                 _|            

######################
Vuln: SQL Injection
######################
; Site : http://www.xxx.*.ar
######################
;Dork :Design by tresideas.com.ar
######################
; Author: xDarkSton3x | MetalSoft Team
######################

; Explotable : noticias_example.php?id="
######################

;Tabla: usuarios

y un Exploit que le hice al wn xD:

exploit_cms.pl

Modo de Uso:

perl exploit_cms.pl http://web.com/path/vuln.php?vulnerable_id=123

Captura:


Fuente de la Vulnerabilidad:

http://xdarkstonex.blogspot.com/2011/04/cms-argentino-vulnerable-sqli.html