CVE-2014-5104

This exploit demonstrates a SQL injection vulnerability in ol-commerce 2.1.1 via the 'country' parameter in the account creation process. The payload extracts database and version information using a time-based blind SQLi technique.

This exploit demonstrates a SQL injection vulnerability in ol-commerce 2.1.1 via the 'a_country' parameter in the affiliate signup process. The PoC includes a crafted HTTP POST request with a malicious payload to extract sensitive data from the 'customers' table.

The provided text describes SQL injection and XSS vulnerabilities in ol-commerce 2.1.1, with an example URL demonstrating the SQL injection point. No actual exploit code is included.

This exploit demonstrates a SQL injection vulnerability in ol-commerce 2.1.1 via the `entry_country_id` parameter in the admin create_account.php endpoint. The PoC includes a crafted payload to extract database information and version details.