Custom Upload SQL injection

Author --> NoEntryPhc
Vulnerability --> SQL Injection
Google Dork --> inurl:customupload.html
Vulnerable Link --> http://www.website.com/customupload.html?category=2

Finding vulnerable site -->

Search inurl:customupload.html in google and you will find many website. Open any of one like i have one link which is given below

http://www.jjlithographics.com/customupload.html?category=2

Now add ' after link to find the vulnerability of website like this.

http://www.jjlithographics.com/customupload.html?category=2'

I you get any warning message like error in mysql database than website is vulnerable.

Exploting the vulnerability-->

Exploit the vulnerability manually or using software like Haviji

Download Haviji from here
Password for download and archieve is thedarkarea