1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1
3 3
3 _ __ __ ________ __ __ 3
7 /' \ /'__`\ /'__`\ /\_____ \ /\ \/\ \ 7
1 /\_, \/\_\L\ \ /\_\L\ \\/___//'/' \_\ \ \ \____ 1
3 \/_/\ \/_/_\_<_\/_/_\_<_ /' /' /'_` \ \ '__`\ 3
3 \ \ \/\ \L\ \ /\ \L\ \ /' /' /\ \L\ \ \ \L\ \ 3
7 \ \_\ \____/ \ \____//\_/ \ \___,_\ \_,__/ 7
1 \/_/\/___/ \/___/ \// \/__,_ /\/___/ 1
3 >> Exploit database separated by exploit 3
3 type (local, remote, DoS, etc.) 3
7 7
1 [+] Site : 1337db.com 1
3 [+] Support e-mail : submit[at]1337db.com 3
3 3
7 ########################################## 7
1 I'm R4dc0re 1337 Member from 1337 DataBase 1
3 ########################################## 3
3 3
7-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-7
# Author: R4dc0re
# Exploit Title:Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity
# Date: 05-12-2010
# Vendor or Software Link:http://www.ecommercemax.com/
# Category:WebApp
# Demo Link:http://www.ecommercemax.com/dg_merchant/products.asp
# Version:1.5
# Price:60$
# Contact: R4dc0re@yahoo.fr
# Website: www.1337db.com
# Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members
Submit Your Exploit at Submit@1337db.com
########################################################################################
[Product Detail]
DGS auto-fulfills the orders by sending a download code, password and
download link to your customers instantly.
They get the goods, you get the cash! All these happening w/out you lifting a finger.
Sell e-books, e-zines, Flash, digital arts, ringtones... Code: ASP 2.0 & VBScript
[Vulnerability]
SQL Injection:
http://www.ecommercemax.com/dg_merchant/shoppingcart.asp?d=[Code]
########################################################################################