Bs Realtor_Web Script SQL Injection

`1 ########################################## 1  
0 I'm Sid3^effects member from Inj3ct0r Team 1  
1 ########################################## 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
  
Name : Bs Realtor_Web Script Sqli Vulnerability  
Date : july 5,2010  
Critical Level : HIGH  
vendor URL :http://www.brotherscripts.com/  
Price:$24.95  
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>  
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_  
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz  
#######################################################################################################  
Description :  
Get Your own professional, great designed Realtor Website at BrotherScripts. We are selling a fully created, professional software which allows real estate agents to create their own sales platform fast and easily. Home buyers can browse/search available properties for free. The listings of property are clearly detailed with features, photos, and driving directions linked to MapQuest.  
#######################################################################################################  
Xploit :SQli Vulnerability  
  
DEMO URL 1:http://server/Realtor_Web/search.php?c=[sqli]  
  
###############################################################################################################  
# 0day no more  
# Sid3^effects  
  
`