Softbiz Web Host Directory Script suffers from a blind SQL injection vulnerability in search_result.php.