Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-7193. PoCs published by R3d-D3V!L.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in EtoShop C2C Forward Auction Creator 2.0, where the 'pa' parameter in the URL is vulnerable to SQL injection due to insufficient input sanitization. No actual exploit code is provided, only a description of the vulnerability.
Description
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp.
Exploits (2)
The provided text describes a SQL injection vulnerability in EtoShop C2C Forward Auction Creator 2.0, where the 'pa' parameter in the URL is vulnerable to SQL injection due to insufficient input sanitization. No actual exploit code is provided, only a description of the vulnerability.
The provided text describes a SQL injection vulnerability in EtoShop C2C Forward Auction Creator 2.0, where unsanitized user input in the UserID and Password fields can be exploited to manipulate SQL queries. The example demonstrates a classic authentication bypass using ' or '1=1--.