This exploit demonstrates a SQL injection vulnerability in ShortCMS v. 1.11F(B) via the 'printview.php' file. The PoC uses a UNION-based SQLi to extract user credentials (nickname and password) from the 'shc_memberlist' table.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:ShortCMS v. 1.11F(B)
No auth needed
Prerequisites:Access to the vulnerable 'printview.php' endpoint