XMS Systems SQL Injection defects and repair

Web: exploit-id.com

E-mail: root [at] exploit-id.com

######################################## #
Im Caddy-Dz, memberof exploit-id.com

######################################## #
========================================================== ==========================================================
####
# Exploit Title: XMS Systems <= SQL Injection Vulnerability
# Author: Caddy-Dz
# Facebook Page: www.facebook.com/islam.caddy
# E-mail: islam_babia@hotmail.com | Caddy-Dz@exploit-id.com
# Category: webapps
# Google Dork: intext: "powered by XMS Systems"
# Tested on: [Windows Vista Edition Int é grale]
####

[*] # Explain! T:

# Http://www.bkjia.com/index.php? Y = [SQLI]

# Http://www.bkjia.com/articles_read.php? A_id = 56 & g_id = 0 [Inject Here] & m_id = 1 => http://www.bkjia.com/articles_read.php? A_id = 56 & g_id = [SQLI]

###

[*] Peace From Algeria

###

===================================== ** Algerians Hackers ** = ==============================================
# Greets:
KedAns-Dz & ** All Algerians Hackers **, jos_ali_joe, All Exploit-Id Team, (exploit-id.com)
(1337day.com), (09exploit.com), All My Friends: T! RiRou, ChoK0, MeRdaw! , CaRras0, StiffLer,
MaaTar, St0fa, Nissou, RmZ... others
========================================================== ======================================

Fix:

Filter related page Parameters