Shape Web Solutions cms SQL Injection defects and repair

######################################## ######################################## #####

#### Shape Web Solutions cms SQL Injection Vulnerability ####

######################################## ######################################## #####

##

# Exploit Title: Shape Web Solutions cms SQL Injection Vulnerability #

# Author: Ashiyane Digital Security Team #

# Date: 03-18-2011 #

# Vendor or Software Link: http://www.shapeweb.com.br /#

# Version: All version #

# Category: webapps #

# Google dork: inurl: ". br/imprimir. php? Id = "#

# Exploit:/imprimir. php? Id = 1 #

# Demo: http://www.bkjia.com/imprimir.php? Id = 1 #

##

############################### Discovered By HashoR ##### ############################

# [Greetz] #

##

# Zend-=-Virangar-=-Milad-Bushehr-=-Iman_TakTaz-=-M3QD4D-=-Hijacker #

#-=-Elvator-=-r3d. z0nE-=-Behrooz_Ice-=-Ali_Eagle-=-Satanic2000-=-Rz04 #

##