BSO sql inkection

2017.12.24

Iran Cyber Security Group (SC)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: intext:"desing by BSO" inurl:".php?id="

# Exploit: BSO sql inkection
# Google Dork: intext:"desing by BSO" inurl:".php?id="
# Date: 2017-12-24
# Vendor Homepage: http://www.bso.gr/
# Tested on: Linux
# Exploit Author: Mkali07
# My Team: https://iran-cyber.net/
# POC :
# SQL Injection :
* Open browser and search dork in google
* Selected in target
* Attack site http://site.com/[path].php?id=[sql]
# Demo: http://www.jossifakis.com/news_details_ru.php?id=40
# Contact With Me : Mkalim07@protonmail.com
Good luck

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

BSO sql inkection

Dork: intext:"desing by BSO" inurl:".php?id="

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.