Lucene search
K

Caregiver Script 2.57 SQL Injection

🗓️ 31 Jan 2017 00:00:00Reported by Kaan KAMISType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 45 Views

Caregiver Script 2.57 SQL Injection vulnerability allows arbitrary admin data rea

Code
`Exploit Title: Caregiver Script v2.57 a SQL Injection  
Date: 30.01.2017  
Vendor Homepage: http://itechscripts.com/  
Software Link: http://itechscripts.com/caregiver-script/  
Exploit Author: Kaan KAMIS  
Contact: iletisim[at]k2an[dot]com  
Website: http://k2an.com  
Category: Web Application Exploits  
  
Overview  
  
Caregiver Script 2.51 is the best solution to launch a portal for hiring people for babysitting and other care giving services in a hassle free manner.  
  
Type of vulnerability:  
  
An SQL Injection vulnerability in Caregiver Script allows attackers to read  
arbitrary administrator data from the database.  
  
Vulnerable Url:  
  
http://locahost/searchJob.php?sitterService=1[payload]  
Vulnerable parameter : sitterService  
Mehod : GET  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation