发布 2018-02-05 漏洞条目

Matrimonial Website Script 2.1.6 – ‘uid’ SQL Injection

Exploit Source

# Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection

# Dork: N/A

# Date: 2018-02-03

# Exploit Author: Borna nematzadeh (L0RD) or borna.nematzadeh123@gmail.com

# Vendor Homepage:

https://www.phpscriptsmall.com/product/matrimonial-website-script/

# Version: 2.1.6

# Category: Webapps

# CVE: N/A

# # # # #

# Description:

# The vulnerability allows an attacker to inject sql commands.

# # # # #

# Proof of Concept:

http://localhost/entrepreneur/view-profile.php?uid=[SQL]

相关漏洞条目