发布 2017-03-27 漏洞条目

CouponPHP CMS 3.1 – ‘code’ SQL Injection

Exploit Source

# # # # #

# Exploit Title: CouponPHP Script v3.1 - SQL Injection

# Google Dork: N/A

# Date: 27.03.2017

# Vendor Homepage: http://couponphp.com/

# Software: http://couponphp.com/demos

# Demo: http://newdemo2.couponphp.com

# Demo: http://newdemo3.couponphp.com

# Version: 3.1

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail : ihsan[@]ihsan[.]net

# #ihsansencan

# # # # #

# SQL Injection/Exploit :

# http://localhost/[PATH]/go.php?coupon_id=1&code=[SQL]

# users

# id

# username

# password

# # # # #

相关漏洞条目