Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25299. PoCs published by cakes.
AI-analyzed exploit summary This exploit demonstrates time-based and boolean-based blind SQL injection vulnerabilities in rimbalinux AhadPOS 1.11. It includes payloads for the 'alamatCustomer' and 'barcode' parameters, leveraging MySQL SLEEP functions and boolean conditions to infer database information.
Description
RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter that allows attackers to manipulate database queries through crafted POST requests. Attackers can exploit time-based and boolean-based blind SQL injection techniques to extract information or potentially interact with the underlying database.
Exploits (1)
This exploit demonstrates time-based and boolean-based blind SQL injection vulnerabilities in rimbalinux AhadPOS 1.11. It includes payloads for the 'alamatCustomer' and 'barcode' parameters, leveraging MySQL SLEEP functions and boolean conditions to infer database information.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N