Bug #78298 [Opn->Spm]: I got a sql injection bug on http://sahabatmarina.com/beautyjourney
| From: | requinix@php.net | Date: | Tue, 16 Jul 2019 08:37:13 +0000 |
| Subject: | Bug #78298 [Opn->Spm]: I got a sql injection bug on http://sahabatmarina.com/beautyjourney | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-221804@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=78298&edit=1
ID: 78298
Updated by: requinix@php.net
Reported by: radian22 dot id at gmail dot com
Summary: I got a sql injection bug on
http://sahabatmarina.com/beautyjourney
-Status: Open
+Status: Spam
Type: Bug
Package: MySQL related
Operating System: Linux Ubuntu
PHP Version: Irrelevant
Block user comment: N
Private report: N
Previous Comments:
------------------------------------------------------------------------
[2019-07-16 08:36:43] radian22 dot id at gmail dot com
Description:
------------
PHP version is 5.6.30
Url bug : http://sahabatmarina.com/beautyjourney/?reff=hipwee
Type bug : Time-based blind
Payload : reff-marina--website' OR SLEEP(5)-- DDZN
Test script:
---------------
http://sahabatmarina.com/beautyjourney/?reff=hipwee
Expected result:
----------------
I hope the bug will be fixed soon by the authorities.
Actual result:
--------------
Okay
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=78298&edit=1