Alcassoft's SOPHIA CMS - SQL Injection

Author: p0pc0rn
type: webapps
platform: cfm
port: 
date_added: 2011-02-24  
date_updated: 2011-02-24  
verified: 1  
codes: OSVDB-71076  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 16225.txt  

Title    : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection
Found by: p0pc0rn 24/02/2011
Web        : http://www.alcassoft.com/site/
Dork    : intext:"Powered by Alcassoft SOPHIA"

SQL
---

http://site.com/path/dsp_page.cfm?pageid=[SQL]