| タイトル | Pihome-SHC Pihome 1.77 SQL Injection |
|---|
| 説明 | In the Pihome v 1.77 - there is a SQLi in the ajax.php controller.
The web application is vulnerable to SQL Injection attacks within ajax modal functionality. Attackers can exploit this vulnerability by injecting malicious input into the "id" parameter,
which is used to edit values in the `mqtt` table.
To exploit the SQL injection vulnerability, attackers craft a payload containing malicious input and inject it into the "id" parameter. For example,
submitting the payload `(sleep(20))--` triggers 20 seconds delay in the request. This demonstrates the successful execution of the injection within the application.
|
|---|
| ソース | ⚠️ https://www.singto.io/pocsforexploits/pihome_sqli_ajax.md |
|---|
| ユーザー | Jelle Janssens (UID 81048) |
|---|
| 送信 | 2025年02月05日 15:25 (1 年 ago) |
|---|
| モデレーション | 2025年02月10日 12:09 (5 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 295088 [pihome-shc PiHome 1.77 ajax.php?Ajax=GetModal_MQTTEdit 識別子 SQLインジェクション] |
|---|
| ポイント | 20 |
|---|