[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Readymade Video Sharing Script 3.2 - search SQL Injection Vulnerability

Author
Varun Bagaria
Risk
[
Security Risk High
]
0day-ID
0day-ID-29766
Category
web applications
Date add
11-02-2018
Platform
php
##################################################################
# Exploit Title: Readymade Video Sharing Script - SQL Injection (Error Based)
# Exploit Author: Varun Bagaria
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/php-video-sharing-script/ 
# Version: 3.2
# Tested on: Windows 7
# Category: Webapps
# CVE :  NA
##################################################################
 
Proof of Concept
=================
 
Attack Parameter : search
Payload : '
 
Reproduction Steps:
------------------------------
1. Access the website
2. In the search bar insert ' and you will get error based SQL Injection

#  0day.today [2024-11-16]  #