Construction Company of Mellat Bank Sql Injection Vulnerability

2015.11.21

Credit: 4TT4CK3R

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
~# : Exploit title : Construction Company of Mellat Bank Sql Injection Vulnerability
~# : Exploit Author : 4TT4CK3R
~# : Vendor HomePage : http://www.mellatmcc.ir
~# : Date : 2015/11/19
~# : Tested on : Kali Linux , Mozilla Firefox , Windows
~# : Google Dork : No
~# : Location : http://www.mellatmcc.ir/pages.php?pageID=2
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
~# : Description >>
Construction Company of Mellat Bank have a Sql Injection Vulnerability on the page pages.php and id=2 !
To test the vulnerability you can add ' at the end of this address :
http://www.mellatmcc.ir/pages.php?pageID=2
You seeing that Mysql error Will occur !!
~# : ScreenShot : http://i.imgur.com/wHWm0JQ.png
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
~# : Discovered by : 4TT4CK3R
~# : We Love Islamic Republic of Iran
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]

References:

http://i.imgur.com/wHWm0JQ.png

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Construction Company of Mellat Bank Sql Injection Vulnerability

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.