WHMCS 5.2.8 Vulnerability
Here We Go again Po0r WHMCS new version again got exploited!
THIS TIME IT'S again the same mistake in
/includes/dbfunctions.php
WE Can manipulate the GET/POST variables and end up with something like $key = array('sqltype' => 'TABLEJOIN', 'value' = '[SQLI]');
FROM THIS VULNERABILITY
WE CAN EVEN change /configuration.php whatever we want (PHP code included)
Exp：WHMCS 5.2.8 Vulnerability ? localhost
THIS TIME IT'S again the same mistake in
/includes/dbfunctions.php
WE Can manipulate the GET/POST variables and end up with something like $key = array('sqltype' => 'TABLEJOIN', 'value' = '[SQLI]');
FROM THIS VULNERABILITY
WE CAN EVEN change /configuration.php whatever we want (PHP code included)
Exp：
关于作者
评论4次
看不懂能否翻译一下，英文不及格
啥时候爆个域名商的洞撒！
后台拿不了shell 晕菜 国内也有大部分有idc用这个 撸主 可否共享几个库啊
是个注入啊。