Secure Download Links – ‘dc’ SQL Injection

Exploit Database
127 阅读

作者： Ihsan Sencan

日期： 2017-03-19
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/41636/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

# # # # #

# Exploit Title: Secure Download Links - SQL Injection

# Google Dork: N/A

# Date: 19.03.2017

# Vendor Homepage: http://sixthlife.net/

# Software: http://sixthlife.net/product/secure-download-links/

# Demo: http://www.satyamtechnologies.net/secdown/example.php

# Version: N/A

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail : ihsan[@]ihsan[.]net

# #ihsansencan

# # # # #

# SQL Injection/Exploit :

# http://localhost/[PATH]/download.php?dc=[SQL]

# # # # #