ARASTAR - SQL Injection Vulnerability

+#######+ |[o] ID | +#######+ [+] Title : ARASTAR SQL Injection Vulnerability [+] Affected Version : ALL VERSIONS [+] Software Link : http://ara-star.com/art.php?ID=172 [+] Tested on : Windows XP SP2 <CHROME + FIREFOX> [+] Date : 18/11/2011 [+] Dork : inurl:'.co.il/Cat.php?ID=' intext:"POWERED BY ARASTAR" [+] Category : Content Management [+] Severity : High [+] Author : TH3_N3RD [+] Follow on FB : https://www.facebook.com/TH3xN3RD +############+ |[o] EXPLOIT | +############+ [+] http://[website]/cat.php?ID=[SQLi] [+] ADMINISTRATION PATH : http://[website]/admin-aps +#########+ |[o] PoC | +#########+ [+] It Depends On The Column Count Of The Script Version /.- +------------+ |[o] Greet'z | +------------+ [+] To : #MY MIND# [&] VERGEIRAS [&] ALL THE MOROCCAN HAX0R'z @`d0n3\-