Exploit System Shop - 'Module aktka' SQL Injection

[Exploiter]

EDB-ID

14985

Проверка EDB

1. Пройдено

Автор

SECRET

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2010-09-12

System Shop - 'Module aktka' SQL Injection

  _____ ______ _____ _____  ______ _______ 
 / ____|  ____/ ____|  __ \|  ____|__   __|
| (___ | |__ | |    | |__) | |__     | |   
 \___ \|  __|| |    |  _  /|  __|    | |   
 ____) | |___| |____| | \ \| |____   | |   
|_____/|______\_____|_|  \_\______|  |_|   
                                           
                                           
# Exploit Title: System Shop SQL Injection - Module aktkat=
# Date: 12.09.2010
# Author: secret
# Software Link: www.system-shop.at
# Version: latest version
# Tested on: XP / Linux

#Dorks : inurl:"aktkat"  / "Powered by System Shop" / "System Shop" site:at

SQL Injection : 
===========================================================================================  

Simple Error Based / Normal SQL Injection in "aktkat="

e.g. http://server/kn.php?aktkat=16 [SQL INJECTION] / columns vary..

NOT FIXED - 12.09.2010

--------------------------------------------------------------------------------

Greetz to all brothers & sisters who are fighting for freedom in IRAN...

خدا شما کمک خواهد کرد

contact : [email protected]