G2webCMS (products.php?cat_id) (member-profile.php?profile) Remote SQL injection Vulnerability

2011-08-01T00:00:00
ID SECURITYVULNS:DOC:26745
Type securityvulns
Reporter Securityvulns
Modified 2011-08-01T00:00:00

Description

########################## IRANIAN THE BEST HACKERS IN THE WORLD
##############

Remote SQL injection Vulnerability

G2webCMS (products.php?cat_id) (member-profile.php?profile)

AuTh0r : Ehsan_Hp200

H0ME : www.ehsanhp.blogsky.com

Email : Ehsan_Hp200@Hotmail.com

Vendor : http://www.g2web.com/

Persian Gulf 4 Ever!

Dork : "Powered by G2webCMS" "inurl:products.php?cat_id="

Exploite:

www.victim.com/store/products.php?cat_id=[SQL]

Dork : "Powered by G2webCMS" "inurl:member-profile.php?profile="

Exploite:

www.victim.com/member-profile.php?profile=[SQL]

SpeCial TanX To : Dj7Xpl

######################### IRANIAN THE BEST HACKERS IN THE WORLD