################################################################### # Exploit Title : SACtr Website SQL Injection # Author : Hritik R # Date : 09/05/2019 # Vendor Homepage : http://sactr.net # Tested On : Windows and Linux # Exploit Risk : High # Google Dorks : inurl:/page.php?id= ################################################################### # Impact : ********************** [+] Reveal Customers Credentials (No Hashes) [+] Multiple Website Database [+] Reveal Customers Details ( Name, Phone No. Email, Address,etc) # SQL Injection Exploit : ********************** [+] http://sactr.net/abroad/page.php?id=[SQL Injection] # Example Vulnerable Sites : ************************* [+]http://sactr.net/abroad/page.php?id=15%27