This exploit demonstrates an error-based SQL injection vulnerability in Ultimate eShop via a crafted URL parameter. The PoC shows how to trigger the vulnerability by injecting a single quote into the 'subid' parameter.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:Ultimate eShop (version unspecified)
No auth needed
Prerequisites:Access to the target web application