DouPHP 1.2 Release 20141027 SQL Injection

2022.07.04

Credit: indoushka

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

====================================================================================================================================
| # Title : DouPHP v1.2 Release 20141027 SQL Injection Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 102.0(32-bit) |
| # Vendor : https://www.douphp.com/ |
| # Dork : "Powered by DouPHP" |
====================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] http://127.0.0.1/products_in.php?id=33 <====| inject here
[+] http://127.0.0.1/admin/ <====| Login
Greetings to :=========================================================================================================================
|
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* |
|
=======================================================================================================================================

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

DouPHP 1.2 Release 20141027 SQL Injection

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.