This exploit demonstrates SQL injection and Local File Inclusion (LFI) vulnerabilities in sabadkharid CMS. The SQLi allows extraction of database version, usernames, and passwords, while the LFI enables arbitrary file upload leading to potential RCE.
Classification
Working Poc 90%
Attack Type
Sqli | Info Leak | Lfi
Complexity
Trivial
Reliability
Reliable
Target:sabadkharid CMS professional edition
No auth needed
Prerequisites:Access to the target web application