Alcassoft's SOPHIA是一款国际化、功能强大的内容管理系统。Alcassoft's SOPHIA中的dsp_page.cfm文件存在sql注入漏洞，可能导致敏感信息泄露。

[+]info:
~~~~~~~~~

Title    : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection
Found by: p0pc0rn 24/02/2011
Web        : http://www-alcassoft-com/site/
Dork    : intext:"Powered by Alcassoft SOPHIA"
 
[+]poc:
~~~~~~~~~
http://site-com/path/dsp_page.cfm?pageid=[SQL]

[+]Reference:

关健词：Alcassoft's SOPHIA CMS SQL