SIPP Versi 3.2.0-5 SQL INJECTION ---------------------- [+] Title :- Sistem Informasi Penelusuran Perkara [+] Vendor Homepage :- hidden, this aplication for goverment [+] Version :- All Versions [+] Tested on :- Linux - Windows - Mac [+] Category :- webapps - Code Igniter setup [+] Exploit Author : iLuv X goodfather [+] Team name :- TernateBlackhat [+] Official Page : www.facebook.com/ternateblackhat/ [+] Available : sql injection cheat sheet | sql injection Method [+] Greedz to : omJL - zbyt3 - liontin - QueenAisyah - Mawar - Ternate Labs - K33P-S1L3NT [+] Contact : ternateblackhat@gmail.com [+] Severity Level :- Medium [+] Method(s) :- POST [+] Vulnerable Parameter(s) :- id_alur_perkara Search for get POST DATA Injection ( PENCARIAN DETIL ) http://sipp.vulnerable.go.id/list_perkara/search_detail [+] Vulnerable File :- /home/vulnerable/public_html/sipp/models/perkara/perkara_m.php [ https://imgur.com/a/4C1WMNt ] SS vulnerable parameter : https://i.imgur.com/fbR2bcG.png SS SQLMAP Execute using POST DATA : https://i.imgur.com/cY28K1m.png