# Exploit title: casio - Cross Site Scripting ( XSS ) Vulnerability # Date: 2018-08-22 # Exploit Author: Elsfa7-110 ( https://www.facebook.com/elsfa7110 ) Vendor Homepage: https://cryptoluc.org/ # Category: Web Application # Dork: N/A # ============================= # Description: SQL injection is a vulnerability that allows an attacker to alter back-end SQL statements by manipulating the user input. An SQL injection occurs when web applications accept user input that is directly placed into a SQL statement and doesn't properly filter out dangerous characters. #============================= Attack details Demo : https://cryptoluc.org/login POST input login was set to 1'" You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '1' ')' at line 1 ================