No Escape (Exploit, PHP, MySQL)
No Escape
The small gizmore software company is expanding, and got contracted to create the new online votings for presidential election in 2025.
The current script is in alpha phase, and we`d like to know if it`s safe.
To prove me wrong you have to set the vote count for at least one of the candidates to 111. There is a reset at 100.
Again you are given the sourcecode, also as highlighted version.
Good Luck!
The current script is in alpha phase, and we`d like to know if it`s safe.
To prove me wrong you have to set the vote count for at least one of the candidates to 111. There is a reset at 100.
Again you are given the sourcecode, also as highlighted version.
Good Luck!
PHP Warning(2): mysqli_connect(): php_network_getaddresses: getaddrinfo for challdb failed: No address associated with hostname in core/inc/GDO/db/GDO_DB_mysqli.php line 15
Backtrace starts in www/challenge/no_escape/index.php line 31. noesc_displayVotes()...... www/challenge/no_escape/code.include line 123. noesc_getVotes().......... www/challenge/no_escape/code.include line 91. noesc_db()................ www/challenge/no_escape/code.include line 17. gdo_db_instance()......... core/inc/GDO/GDO.php line 42. GDO_DB_mysqli->connect().. core/inc/GDO/db/GDO_DB_mysqli.php line 15. mysqli_connect().......... [unknown file] line ?. GWF_Debug::error_handler() core/inc/util/GWF_Debug.php line 180.
PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6
Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.