AV Arcade Free Edition - 'add_rating.php?id' Blind SQL Injection

Author: DaOne
type: webapps
platform: php
port: 
date_added: 2012-09-02 
date_updated: 2012-09-02 
verified: 1 
codes: OSVDB-85149 
tags: 
aliases:  
screenshot_url:  
application_url: 

##########################################
[~] Exploit Title: AV Arcade Free Edition Blind SQL Injection
[~] Date: 31/08/2012
[~] Author: DaOne (@LibyanCA)
[~] Software Link: http://www.avscripts.net/avarcade/freearcadescript/
[~] Google Dork: intext:Powered by AV Arcade Free Edition"
##########################################

# Exploit-DB Note: Must be logged in.

[#] [ Exploit ]

http://localhost/content/add_rating.php?id=[Blind SQL Injection]


##########################################
[*] thanks to : All LibyanCA Members (^_^)
##########################################