# Exploit Title: Raw Marketing CMS - SQL Injection Vulnerability
# Date: 24/01/2015
# Exploit Author: Local Host
# Author Homepage: pasuruanblackhat.org
# Version: All Version ( Under 2015)
# Tested on: Ubuntu 14.04
Overview :
The CMS is vuln on all .php?id= , so you only search .php?id= in the website. you know if the website is use Raw Marketing CMS only give /cms/ in the url . and you can see login admin Raw Marketing CMS, usually the CMS in AU, because the vendor of this CMS is australian people. The SQLI error is not show warning, just show not perfectly page. Iam reported to vendor but not responsive, It's not joke