Interactive World SQL Injection

Interactive World (index.php) Sql Injection Vulnerability [ Multiple
Vulnerabilities ]
==============================================================

####################################################################
.:. Exploit Title : Interactive World SQL Injection Vulnerability [ Multiple
Vulnerabilities ]
.:. Author : Netrondoank aka netron
.:. My Web : www.indonesiansecurity.info ,indotek.or.id and Ilmuhacker.org
.:. Platform/Tested on: Linux
.:. Version : none
.:. Software Link: : http://www.interactive-world.com
.:. Dork : "Powered By Interactive World"

####################################################################

.:.  Exploit

===[ SQL Injenction ]===
http://www.site.com//news_desc.php?Id=[Sqli]


Xss
===[ XSS/HTML Injection ]===
http://site/path/latest_news_next.php?id=89&news_type=[XSS ATTACK HERE]