System Shop - 'Module aktka' SQL Injection

Author: secret
type: webapps
platform: php
port: 0
date_added: 2010-09-12
date_updated: 2010-09-12
verified: 1
codes: 
tags: 
aliases: 
screenshot_url: 
application_url: 

  _____ ______ _____ _____  ______ _______
 / ____|  ____/ ____|  __ \|  ____|__   __|
| (___ | |__ | |    | |__) | |__     | |
 \___ \|  __|| |    |  _  /|  __|    | |
 ____) | |___| |____| | \ \| |____   | |
|_____/|______\_____|_|  \_\______|  |_|


# Exploit Title: System Shop SQL Injection - Module aktkat=
# Date: 12.09.2010
# Author: secret
# Software Link: www.system-shop.at
# Version: latest version
# Tested on: XP / Linux

#Dorks : inurl:"aktkat"  / "Powered by System Shop" / "System Shop" site:at

SQL Injection :
===========================================================================================

Simple Error Based / Normal SQL Injection in "aktkat="

e.g. http://server/kn.php?aktkat=16 [SQL INJECTION] / columns vary..

NOT FIXED - 12.09.2010

--------------------------------------------------------------------------------

Greetz to all brothers & sisters who are fighting for freedom in IRAN...

خدا شما کمک خواهد کرد

contact : secret_hf@hotmail.com