Iran Virutal Airliners SQL INJECTION Vulnerability

2019.05.20

Bl4ckNiGth (IR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

############################################################### 
#Title : Iran Virutal Airliners SQL INJECTION Vulnerability 
# Author : Bl4ckNiGth 
# Vendor : irva.ir 
# Tasted on : Win 7 
############################################################### 
==> go to www.irva.ir ==> Then SQL INJECTION on http://www.irva.ir/index.php/aircraftshop/listproducts?id=1
#####################################################
 demo ==> http://www.irva.ir/index.php/aircraftshop/listproducts?id=1' 
##################################################### 

# discovred by Bl4ckNiGth
#thank for Q0w3yl and RED_X

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Iran Virutal Airliners SQL INJECTION Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.