Bug sql injectin di "Espacio Ecuador"

[ type attack ]
sql injection

[ dork ]
intext:"developed by Espacio Ecuador"  inurl:id=

[ demo ]
http://www.mytripecuador.com/ecuador-hotels/hotel.php?id=25

[ details ]
http://cxsecurity.com/issue/WLB-2012110228