Esselbach Storyteller是一款功能強大的內容管理系統，Esselbach Storyteller CMS 1.8版的page.php存在SQL注入漏洞，可能導致敏感信息泄露。

[+]info:
~~~~~~~~~

# Exploit Title: Esselbach Storyteller CMS System Version 1.8 [page.php] Remote SQL Injection Vulnerability
# Date: March, 9th 2011 [GMT +7]
# Author: Shamus
# Software Link: http://www.esselbach.com/
# Version : Esselbach Storyteller CMS System Version 1.8
# Tested on: windows
# CVE : -

[+]poc:
~~~~~~~~~

SQL injection vulnerability affects:
http://localhost.com/page.php?id=[Injection Query]

Dork:
~~~~~
Google : powered by Esselbach Storyteller CMS System Version 1.8

[+]Reference:

關健詞： SQL注入漏洞