CMS 4.x.x Zorder (SQL Injection Vul)

*####################################################################
[+] Exploit Title : CMS 4.x.x Zorder (SQL Injection Vul)
[+] Author : Kr4L BeNiM
[+] Contact : [You must be registered and logged in to see this link.]
[+] Date : November 13, 2011
[+] Software Link: [You must be registered and logged in to see this link.]
[+] Category: Web Apps
####################################################################
Vulnerability:

*SQL injection Vulnerability*

[#] Exploit : -
The "zorder" parameter was not properly sanitized upon submission to
the administrator/index2.php url, which allows attacker to conduct
SQL Injection attack.


[#] Explaination : -
[You must be registered and logged in to see this link.]
(SQL Inj Codes)

####################################################################
[+] Greets : Likuid Sky, Hax.Root, S.O.G, DjArs HaXoR, KiLLerMiNd, CyberLeeTs
####################################################################