[ECHO_ADV_91$2008] Online Rental Property Script <= 4.5 (pid) Blind Sql Injection Vulnerability

Online Rental Property Script <= 4.5 (pid) Blind Sql Injection Vulnerability. Vulnerability in Online Rental Property Script version <= 4.5 allows remote attackers to gain system access by exploiting blind SQL injection in the pid parameter. Successful exploitation reveals admin username and MD5 password hash. Solution: Proper input verification and enabling magic quotes in php.ini. Affected vendor contacted on 01-05-2008 and advisory released on 05-05-2008