PHP Gift Registry 1.5.5 SQL Injection

`# Exploit Title: PHP Gift Registry 1.5.5 SQL Injection  
# Date: 02/22/12  
# Author: G13  
# Software Link: https://sourceforge.net/projects/phpgiftreg/  
# Version: 1.5.5  
# Category: webapps (php)  
#  
  
##### Vulnerability #####  
  
The userid parameter in the users.php file is vulnerable to SQL Injection.  
  
A user must be signed in to exploit this.  
  
##### Vendor Notification #####  
  
02/22/12 - Vendor Notified  
02/24/12 - No response, disclosure  
  
##### Exploit #####  
  
http://localhost/phpgiftreg/users.php?action=edit&userid=[SQLi]  
`