####################################################### # Exploit Title : VSP Softtech - Sql Injection Vulnerability # Date : 2017/09/17 # Exploit Author : HamidHacker # Vendor Homepage : www.vspsofttech.com # Version : 1.0 # Google Dork : intext:"Developed by VSP Softtech" inurl:.php?id= # category : Webapps # Tested on : Windows10 , Firefox ####################################################### [+] POC: 1- Search Google Dork : intext:"Developed by VSP Softtech" inurl:.php?id= 2- Open a Target 3- Perform the sql injection operation on Your Target [+] Demo: http://www.indupharma.co.in/product-detail.php?id=10' [Sql Injection] # Discovered by : HamidHacker & Hidden_eagle