Description
Exploit for multiple platform in category web applications
{"id": "1337DAY-ID-23773", "type": "zdt", "bulletinFamily": "exploit", "title": "Lively cart SQL Injection Vulnerability", "description": "Exploit for multiple platform in category web applications", "published": "2015-06-20T00:00:00", "modified": "2015-06-20T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://0day.today/exploit/description/23773", "reporter": "Manish Tanwar", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2018-02-17T19:23:02", "viewCount": 9, "enchantments": {"score": {"value": 0.5, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.5}, "sourceHref": "https://0day.today/exploit/23773", "sourceData": "##################################################################################################\r\n#Exploit Title : Lively cart SQL Injection vulnerability\r\n#Author : Manish Kishan Tanwar AKA error1046\r\n#Vendor Link : http://codecanyon.net/item/livelycart-a-jquery-php-store-shop/5531393\r\n#Date : 18/06/2015\r\n#Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Incredible,Kishan Singh and ritu rathi\r\n#Discovered At : Indishell Lab\r\n##################################################################################################\r\n \r\n////////////////////////\r\n/// Overview:\r\n////////////////////////\r\n \r\n \r\nLively cart is shping cart script and search parameter(search_query) in not filtering user supplied data and hence affected from SQL injection vulnerability \r\n \r\n///////////////////////////////\r\n// Vulnerability Description:\r\n///////////////////////////////\r\nvulnerability is due to search_query GET parameter \r\n \r\n////////////////\r\n/// POC ////\r\n///////////////\r\n \r\n \r\nhttp://SERVER/1.2.0/product/search?search_query='\r\n \r\n \r\n --==[[ Greetz To ]]==--\r\n############################################################################################\r\n#Guru ji zero ,code breaker ica, root_devil, google_warrior,INX_r0ot,Darkwolf indishell,Baba, \r\n#Silent poison India,Magnum sniper,ethicalnoob Indishell,Reborn India,L0rd Crus4d3r,cool toad,\r\n#Hackuin,Alicks,mike waals,Suriya Prakash, cyber gladiator,Cyber Ace,Golden boy INDIA,\r\n#Ketan Singh,AR AR,saad abbasi,Minhal Mehdi ,Raj bhai ji ,Hacking queen,lovetherisk,Bikash Dash\r\n#############################################################################################\r\n --==[[Love to]]==--\r\n# My Father ,my Ex Teacher,cold fire hacker,Mannu, ViKi ,Ashu bhai ji,Soldier Of God, Bhuppi,\r\n#Mohit,Ffe,Ashish,Shardhanand,Budhaoo,Jagriti,Salty and Don(Deepika kaushik)\r\n --==[[ Special Fuck goes to ]]==--\r\n <3 suriya Cyber Tyson <3\n\n# 0day.today [2018-02-17] #", "_state": {"dependencies": 1646936595, "score": 1659766679, "epss": 1678811959}}
{}