Avon Groups (search_result.php?cid) Remote SQL injection Vulnerability

2011-08-01T00:00:00
ID SECURITYVULNS:DOC:26733
Type securityvulns
Reporter Securityvulns
Modified 2011-08-01T00:00:00

Description

############################### IRANIAN THE BEST HACKERS IN THE WORLD ##################

##############

Remote SQL injection Vulnerability

Avon Groups (search_result.php?cid)

AuTh0r : Ehsan_Hp200

H0ME : www.ehsanhp.blogsky.com

Email : Ehsan_Hp200@Hotmail.com

Vendor : http://www.avongroups.in/it/

Persian Gulf 4 Ever!

Dork : "Powered By: Avon Enterprises Pvt. Ltd. " "inurl:search_result.php?cid='"

Exploite:

www.victim.com/search_result.php?cid=[SQL]

SpeCial TanX To : Dj7Xpl

######################### IRANIAN THE BEST HACKERS IN THE WORLD ##################