Arquicomp CMS (fns_db.php) SQL Injection Vulnerability

Date : 17 July 2010
Critical Lvl : High
Impact : Exposure of sensitive information
Where : From Remote
Dork :  allinurl:carro.php?id_menu=

[Sofware afected info]
http://www.arquicomp.cl/
http://www.databyte.cl/

[Exploting..demo]
http://example/carro.php?id_menu=10&id_submenu=[SQL]&padre=30&tipo=1&e=7&c=30