1024 CMS 2.1.1 - 'p' Parameter SQL Injection

Gerardo Vazquez, Eduardo Arriols 22.08.2012 Verified
Web Application Exploits PHP

Exploit Code

source: http://www.securityfocus.com/bid/55170/info

1024 CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

1024 CMS 2.1.1 is vulnerable; other versions may also be affected. 

http:// www.example.com/index.php?p=[SQLi]