Already discovered:

http://packetstormsecurity.org/0809-...phpb2b-sql.txt cceb7b553c51129e88d5553fdcb5129d E-PHP B2B Trading Marketplace Scripts suffers from a remote SQL injection vulnerability in listings.php. &nbsp;Homepage: <a href="http://www.darkc0de.com/" target="ext">http://www.darkc0de.com/.</a> Authored By <a href="mailto45c4l[at]hotmail.com">r45c4l</a>

On Wed, Sep 10, 2008 at 03:07:37PM +0300, hussin x wrote:
> |_________________________________________________ __|
> |
> | E-Php B2B Trading Marketplace(cid) Remote SQL Injection Vulnerability
> |
> |_________________________________________________ __
> |---------------------Hussin X----------------------|
> |
> | Author: Hussin X
> |
> | Home : WwW.Hussin-X.CoM <http://www.hussin-x.com/> | www.tryag.cc/cc
> |
> | email: darkangel_g85[at]Yahoo[DoT]com
> |
> |
> |
> |_________________________________________________ __
> | |
> |
> | script : http://www.ephpscripts.com
> |
> |_________________________________________________ __|
>
> Exploit:
>
>
>
> http://www.&#91;target].com/Script/listi...phpb2b_members
> --
>
>
>
>
>
>
>
> L!VE DEMO: :
>
> INFO
>
> http://www.ephpscripts.com/demo/b2b/...phpb2b_members
> --
>
>
>
> http://www.ephpscripts.com/demo/b2b/...phpb2b_members
> --
>
>
>
>
>
>
>
> ____________________________( Greetz )_________________________________
> |
> | All members of the Forum WwW.Hussin-X.CoM <http://www.hussin-x.com/> |
> WwW.TrYaG.CC <http://www.tryag.cc/>
> |
> | My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
> |
> | Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | mos_chori
> |_________________________________________________ _____________________
>
>
> Im IRAQi

> |_________________________________________________ __|
> |
> | E-Php B2B Trading Marketplace(cid) Remote SQL Injection Vulnerability
> |
> |_________________________________________________ __
> |---------------------Hussin X----------------------|
> |
> | Author: Hussin X
> |
> | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc
> |
> | email: darkangel_g85[at]Yahoo[DoT]com
> |
> |
> |
> |_________________________________________________ __
> | |
> |
> | script : http://www.ephpscripts.com
> |
> |_________________________________________________ __|
>
> Exploit:
>
>
>
> http://www.&#91;target].com/Script/listi...pb2b_members--
>
>
>
>
>
>
>
> L!VE DEMO: :
>
> INFO
>
> http://www.ephpscripts.com/demo/b2b/...pb2b_members--
>
>
>
> http://www.ephpscripts.com/demo/b2b/...pb2b_members--
>
>
>
>
>
>
>
> ____________________________( Greetz )_________________________________
> |
> | All members of the Forum WwW.Hussin-X.CoM | WwW.TrYaG.CC
> |
> | My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
> |
> | Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | mos_chori
> |_________________________________________________ _____________________
>
>
> Im IRAQi