|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||* ||*||*||*||*| |-------------------In The Name Of God------------------------| |[+] Exploit Title : DEVILART S.C Sql Injection Vulnerability |[+] Exploit Author : Ashiyane Digital Security Team |[+] Vendor Homepage : http://www.devilart.pl |[+] Google Dork : " inurl : index.php?id=tcvduqrj intext:Warning+mysql_fetch_array" |[+] Tested on : Windows 10 ~~> Mozilla Firefox |[+] Contact: shahroukh06@gmail.com |[+] Date : 1/19/2017 |[+]======================================| |[+] Proof: |[+] |[+] http://www.jmmmeble.pl/index.php?id=tcvduqrj [SQLI] |[+] http://montazecnc.pl/index.php?id=tcvduqrj [SQLI] |[+] http://formatkimeblowe.com.pl/index.php?id=tcvduqrj [SQLI] |[+] http://leasing-kalkulacja.pl/index.php?id=tcvduqrj [SQLI] |[+] |*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||* ||*||*||*||*| |[+] Discovered By : sir shahroukh |*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||* ||*||*||*||*|