Miracle Hunt Services SQL Injection

2019.10.25
Risk: Medium
Local: Yes
Remote: Yes
CVE: N/A
CWE: N/A

[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Exploit Title : Miracle Hunt Services SQL Injection [+] Dork : "Powered by : Miracle Hunt Services" [+] Author : Magelang1337 [+] Tested on : Windows 10/Linux [+] path admin: site.com/admin [+] [+] POC : [+] You can use SQL inject tools like Havij, Sqlmap or any other tools [+] To upload a backdoor you can use the Burpsuite or tamper data [+] [+] Demo : [+] http://www.zedkitchen.com/service_details.php?id=7 [+] http://www.sovereignenterprise.in/service-detail.php?serv=11 [+] http://www.rajhanselectric.com/products.php?pro_subcat_hdr=69 [+] http://sparkzelectro.com/service.php?sid=25 [+] http://devbhoomipharmaceuticals.com/products.php?data=7 [+] http://shalengineers.in/product.php?id=129 [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]

References:

https://www.magelang1337.com/search/label/Deface


Vote for this issue:
0%
100%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top