phpDenora 1.4.6 SQL Injection

[backdoor]

   In The Name Of Allah
==============================================================================
        e-Rapido v3.3.2 SQL Injuction
==============================================================================
     [»] Title   :           [ e-Rapido v3.3.2 SQL Injuction ]
      [»] Author  :           [ HackStorm }
      [»] Email   :           [ HackStorm@live.com ]
      [»] Date    :           [ 23/2/2012 ]
      [»] Version :           [ e-Rapido v3.3.2 ]
      [»] Home    :           [wWw.SA3eKA.COM
      [»] Google Dork:           [ inurl:"filemanager/browser/custom/index.php?id=" ]
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

   -[Exploit]-:
    *  TARGET/erapido/js/fckeditor/editor/filemanager/browser/custom/index.php?id=[SQL]

Sursa: aici