| 标题 | Neetai Tech– SQL Injection vulnerability |
|---|
| 描述 | #Exploit Title: "Neetai Tech"– SQL Injection vulnerability
#Date:2020-07-07
#Exploit Author: Mostafa Farzaneh
#Vendor Homepage: www.neetai.com
#Google Dork: "Designed by Neetai Tech"
#Category:webapps
#Tested On: windows 10, Firefox
#Software Link: www.neetai.com
Proof of Concept:
1-Search google Dork: "Designed by Neetai Tech"
Demo http://9squareinternational.com/product.php?cd=12 [Sql Injection vulnerability]
Demo: http://www.lvmvadodara.com/gallery.php?gid=54 [Sql Injection vulnerability]
Demo: https://www.dhruvtravels.com/tour.php?id=88[Sql Injection vulnerability]
Demo: https://potsndials.com/product.php?id=10[Sql Injection vulnerability]
Demo: http://www.mansielectronics.com/oe_product.php?cid=2[Sql Injection vulnerability]
*********************************************************
#Discovered by: Mostafa Farzaneh from PywebSercurity team
#Telegram: @pyweb_security
********************************************************* |
|---|
| 用户 | pyweb-security (UID 11883) |
|---|
| 提交 | 2020-07-08 11時05分 (6 年前) |
|---|
| 管理 | 2020-08-10 11時38分 (1 month later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 159438 [Neetai Tech /product.php SQL注入] |
|---|
| 积分 | 17 |
|---|