E-Store versions 1.0 and 2.0 suffer from a remote SQL injection vulnerability.
56aad61d02fc462a5fccf148809e8a837561f625ee8a0c5dc07e0c505a6d933e# Exploit Author: Nawaf Alkeraithe
======================================
for "E-store 1.0":
# Google Dork: "Powered by: PD" inurl:"page.php?id"
#Vulnerable page:
https://[target]/page.php?id=[SQL Injection]
======================================
for "E-store 2.0":
# Google Dork: "Powered by: PD" inurl:"news.php?id"
#Vulnerable page:
https://[target]/news.php?id=[SQL Injection]
Vendor: https://www.uaepd.net/products.html?id=2
Affected versions:
E-Store 1.0
E-Store 2.0
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed