CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

CVE-2018-5986

CVE-2018-5986 is an SQL injection in Easy Car Script 2014, triggered by the s_order or s_row parameter to site_search.php. The vulnerability allows injection of SQL commands and is documented in multiple sources (NVD, CNVD, CVE lists) with PoC/exploit references indicating remote exploitation. Co...

Easy Car Script 2014 SQL Injection

Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Exploit Author: Ihsan Sencan Author Web:...

Easy Car Script 2014 - SQL Injection

Easy Car Script 2014 - SQL Injection Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Explo...