• info
• discussion
• exploit
• solution
• references

Cosmoshop Lshop.CGI SQL Injection Vulnerability


This issue can be exploited through a web client.

A proof of concept is available:

• /data/vulnerabilities/exploits/Cosmoshop_poc.txt