Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability

[+] Post Title :

Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability

[+] Date : Rabu, 01 Februari 2012
[+] Author : Dr. Cruzz
[+] Link : http://xcruzz.blogspot.com/2012/02/peel-shopping-version-28-and-version-29.html
[+] Type : Exploit

EDB-ID: 18422    CVE: N/A    OSVDB-ID: N/A
Author: Cyber-Crystal    Published: 2012-01-26    Verified: Not Verified
Exploit Code:   Download    Vulnerable App:   N/A

+-------------------------------------------------------------------------+
# Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability
# version       : v2.9
# Author        : Cyber-Crystal
# Date          : n/a
# Software Link : http://www.peel.fr/ || or http://www.easy-script.com/scripts-PHP/peel-v29-4308.html
+-------------------------------------------------------------------------+
[+] Exploits
http://localhost/peel/index.php/achat/recherche.php?motclef=[Xss Here ]&action=Rechercher
http://localhost/peel/administrer/tva.php?mode=modif&id=[SQL]
http://localhost/peel/index.php/[XSS]
# The End //