Vulnerability: Error-Based SQL Injection Affected Application: xt:Commerce Gambio 2008 < 2010 Vulnerable File: reviews.php EDB-ID: 15039 CVE-ID: 2010-4954 Author: secret Type: WebApps Platform: PHP Date: 2010-09-18 Vulnerable App: xt:Commerce Gambio Tested on: XP / Linux Not Fixed: Not Fixed Exploit Title: xt:Commerce Gambio 2008 - 2010 ERROR Based SQL Injection "reviews.php" Site: swissfaking.net/board Software Link: http://www.gambio.de/ Version: 2006 - 2008 - 2010 - all versions Example Exploit URL: - http://www.xxxxx.com/product_reviews_info.php?products_id=x[SQL INJECTION] - http://server/product_reviews_info.php?products_id=4[ERROR BASED SQL INECTION] - http://server/product_reviews_info.php?products_id=4'