23 lines
No EOL
697 B
Text
23 lines
No EOL
697 B
Text
######################
|
|
# Exploit Title : MyCustomers Cms Sql Injection Vulnerability
|
|
# Exploit Author : Persian Hack Team
|
|
# Vendor Homepage : http://www.iran-php.com/
|
|
# Google Dork : "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873"
|
|
# Date: 2015/11/28
|
|
# Version : 1.3
|
|
#
|
|
######################
|
|
# Vulnerable Paramter DPT=
|
|
# Demo:
|
|
# http://server/index.php?DPT=IP17%27
|
|
#
|
|
# Youtube : https://www.youtube.com/watch?v=43DVOq5L2hw
|
|
#
|
|
# We reported to vendor but Anyone not responsive
|
|
# It's not joke
|
|
# We do not take responsibility
|
|
#
|
|
######################
|
|
# Discovered by :
|
|
# Mojtaba MobhaM & T3NZOG4N (t3nz0g4n@yahoo.com)
|
|
###################### |