Bs Auction Script SQL Injection

`1 ########################################## 1  
0 I'm Sid3^effects member from Inj3ct0r Team 1  
1 ########################################## 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
  
Name : Bs Auction Script Sqli Vulnerability  
Date : july 5,2010  
Critical Level : HIGH  
vendor URL :http://www.brotherscripts.com/  
Price:$24.95  
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>  
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_  
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz  
#######################################################################################################  
Description :  
Site design of the demo may not match the product theme you are interested. The demo is just for the demonstration purposes. For the actual design, enlarge the image given above. In addition, many functions are disabled in demo.  
  
Begin your own professional online auction website with BrotherScripts just right now. Our auction software has many functions, well designed and easy customizable templates for the lowest possible price. The Quality and good Support guaranteed!  
  
  
#######################################################################################################  
Xploit :BSQli Vulnerability  
  
DEMO URL :http://server/Auction_Software/confirm.php?id=[sqli]  
  
###############################################################################################################  
# 0day no more  
# Sid3^effects  
  
`