Tiendas Online SQL Injection

`Tiendas Online SQL Injection Vulnerability  
=============================================================================  
Last login: Sat Sep 14 01:59:02 on console  
______ ___  
______ ___/ / / / /  
/ / /___ ____ ___/__ / / ____ ____ _______ ____ ___/ /  
: / / / \/__ \/ / / / \/ \/ \/ / \/ \/ /  
| / / / / / / / / / / / / / /__/ / /__/ / / / /  
--X-- / / / / / / / / / / / / / / / /__ / __/ / /  
|\____/__/__/\____/\____/__/__/__/\____/__/ /__/ / /\____/\____/  
: ____ \____/:  
/ \____ ____ ____ ____ ____ |  
/ / / \/ \/ \/ \/ --X--  
Don Tukulesto / / /__/ /__/ / / /__/ /__/|   
/ / / / / / / __/__ /__ / :  
/__/__/\____/\____/\____/ / / / /  
www.indonesiancoder.com\____/\____/   
  
=============================================================================  
[Author Info]  
Name : Don Tukulesto ([email protected])  
Homepage : http://indonesiancoder.com  
Tested On : Os X Version 10.8.4  
  
  
=================================  
| Software Info |  
=================================  
[>] Category : Web Apps  
[>] Vendor : http://tiendastore.net // mipagina.net  
[>] Software : Shopping Cart - tiendastore.net  
[>] Description : Design of online stores customized Internet marketing products that allow a brand or company.  
The best way to sell products online, the equivalent of a physical.  
  
=================================  
Proof of Concept  
[>] http://server/cat_ver_producto.php?id_catalogo_producto=[number][INFECTED]  
[>] http://server/cat_lista_productos.php?id_catalogo_categoria=[number][INFECTED]  
  
=============================================================================  
Indonesian Coder // Malang Cyber Crew // Exploit-ID // Kill-9 Crew  
  
[-] k4L0ng666 ~ YaDoY666 ~ Zen_Rooney ~ Xr0b0t ~ jos_ali ~ vYc0D  
[-] V3N0M ~ Pathloader ~ Contrex ~ Arianom ~ YOU!!!  
  
We are the watchmen, the hackers who quietly observe the scene.  
Get the Codes and Feel the Soul.  
`