shopstorenow (orange.asp) sql injection
*********************---Hitamputih crew---******************************** * * * *
* Discovered By : IbnuSina on www.hitamputih.biz *
* Contact : IbnuSina[at]crew-anker.com *
* vendor : http://www.shopstorenow.com/ *
* Greetz : Solpot,permenhack,barbarosa,cahgemblunkz,fung_men,setiawan * * and all member #hitamputih crew community http://www.hitam-putih.com/ * ***************************************************************************
poc :
http://sitename.com/[scriptPATH]/orange.asp?CatID=[sql]
google dork : "powered by shopstorenow"