Tiendas Online SQL Injection Vulnerability
=============================================================================
Last login: Sat Sep 14 01:59:02 on console
______ ___
______ ___/ / / / /
/ / /___ ____ ___/__ / / ____ ____ _______ ____ ___/ /
: / / / \/__ \/ / / / \/ \/ \/ / \/ \/ /
| / / / / / / / / / / / / / /__/ / /__/ / / / /
--X-- / / / / / / / / / / / / / / / /__ / __/ / /
|\____/__/__/\____/\____/__/__/__/\____/__/ /__/ / /\____/\____/
: ____ \____/:
/ \____ ____ ____ ____ ____ |
/ / / \/ \/ \/ \/ --X--
Don Tukulesto / / /__/ /__/ / / /__/ /__/|
/ / / / / / / __/__ /__ / :
/__/__/\____/\____/\____/ / / / /
www.indonesiancoder.com\____/\____/
=============================================================================
[Author Info]
Name : Don Tukulesto (root@indonesiancoder.com)
Homepage : http://indonesiancoder.com
Tested On : Os X Version 10.8.4
=================================
| Software Info |
=================================
[>] Category : Web Apps
[>] Vendor : http://tiendastore.net // mipagina.net
[>] Software : Shopping Cart - tiendastore.net
[>] Description : Design of online stores customized Internet marketing products that allow a brand or company.
The best way to sell products online, the equivalent of a physical.
=================================
Proof of Concept
[>] http://server/cat_ver_producto.php?id_catalogo_producto=[number][INFECTED]
[>] http://server/cat_lista_productos.php?id_catalogo_categoria=[number][INFECTED]
=============================================================================
Indonesian Coder // Malang Cyber Crew // Exploit-ID // Kill-9 Crew
[-] k4L0ng666 ~ YaDoY666 ~ Zen_Rooney ~ Xr0b0t ~ jos_ali ~ vYc0D
[-] V3N0M ~ Pathloader ~ Contrex ~ Arianom ~ YOU!!!
We are the watchmen, the hackers who quietly observe the scene.
Get the Codes and Feel the Soul.
