This is a proof-of-concept for a SQL injection vulnerability in spidaNews V.1.0. The exploit demonstrates how an attacker can inject malicious SQL queries via the 'id' parameter in news.php to extract database information such as version and user details.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:spidaNews V.1.0
No auth needed
Prerequisites:Access to the vulnerable web application