+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: The searchphrase cookie appears to be vulnerable to SQL injection attacks (/showthread.php?tid=6158336)
The searchphrase cookie appears to be vulnerable to SQL injection attacks - aa6667 - Jun 11, 2021
Hello everyone , I need your help , I’m trying to use sqlmap for sqli .
I scan the site and it tells me the following:
The searchphrase cookie appears to be vulnerable to SQL injection attacks. The payloads ' and '2401'='2401 and ' and '2767'='2772 were each submitted in the searchphrase cookie. These two requests resulted in different responses, indicating that the input is being incorporated into a SQL query in an unsafe way
I would like to tell you what parameters I can use to access the db with sqlmap
I will appreciate so much.
Regards ,
RE: The searchphrase cookie appears to be vulnerable to SQL injection attacks - Money- - Jun 11, 2021
It says the " searchphrase cookie " is vulnerable , just put " --tables " or " --dump " to get the entire DB?
RE: The searchphrase cookie appears to be vulnerable to SQL injection attacks - aa6667 - Jun 12, 2021
I will try but it’s not working ! python3 sqlmap.py -url - -tables . Says it’s not vulnerable