====    
{in the name of god}
====   
-----------------------------------------     
# exploit title: matnasnet sql injection vulnerability  
 
# date: 8/10/2017

# author: Ashiyane digital security team  
    
# vendor homepage :http://matnasnet.org.il

# tested on : Windows 10 / chrome    

-----------------------------------------       
  
# Google Dork : google drok: site:il   inurl:Page.php?type= 

-----------------------------------------         
#  http://www.mhatzor.org.il/mobile/Page.php?type=event&id=1995  

#  http://www.matnas-sderot.org.il/mobile/Page.php?type=page&id=7 

#  http://www.tverya.org.il/page.php?type=shluha&id=93 

#  http://posmart.org.il/mobile/Page.php?type=SubPartition&id=170 

#  https://www.msng.org.il/mobile/Page.php?type=SubPartition&id=3 

     
-----------------------------------------        
#discovered by : sir shahroukh     
-----------------------------------------