WordPress NextGEN Smooth Gallery Blind SQL Injection

`#############################################################################################################  
## WordPress NextGEN Smooth Gallery BLIND SQL injection ##  
## Author : kaMtiEz ([email protected]) ##  
## Homepage : http://www.indonesiancoder.com ##  
## Date : 03 August, 2010 ##  
#############################################################################################################  
  
[ Software Information ]  
  
[+] Download : http://downloads.wordpress.org/plugin/nextgen-smooth-gallery.1.2.zip  
[+] version : 1.2 or lower maybe also affected  
[+] Vulnerability : BLIND SQL  
[+] Dork : "CiHuY"  
[+] LOCATION : INDONESIA - JOGJA  
  
#############################################################################################################  
  
[ Vulnerable File ]  
  
http://127.0.0.1/[kaMtiEz]/wp-content/plugins/nextgen-smooth-gallery/nggSmoothFrame.php?galleryID=[VALID ID][BLIND-SQL]  
  
[ DEMO ]  
  
http://www.site.com/wp-content/plugins/nextgen-smooth-gallery/nggSmoothFrame.php?galleryID=31[BLIND-SQL]  
  
http://www.site.com/wp-content/plugins/nextgen-smooth-gallery/nggSmoothFrame.php?galleryID=34[BLIND-SQL]  
  
http://www.site.com/dp2009/wp-content/plugins/nextgen-smooth-gallery/nggSmoothFrame.php?galleryID=2[BLIND-SQL]  
  
[ FIX ]  
  
dunno :">  
  
  
#############################################################################################################  
  
[ Thx TO ]  
  
[+] INDONESIAN CODER TEAM MainHack MAGELANG CYBER ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW IH-CREW  
[+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot,Jack-,Hakz,pl4nkt0n  
[+] Contrex,YadoY666,bumble_be,MarahMeraH,newbie_043,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck  
[+] Coracore,Gh4mb4s,Jack-,vYcOd,ayy,otong,CS-31,yur4kh4,MISTERFRIBO,GENI212,anharku,isarock  
  
  
[ NOTE ]  
  
[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM  
[+] Menyambut kemerdekaan INDONESIA .. MERDEKA !!  
[+] Selamat Menyambut datangnya bulan ramadhan :D  
[+] sendiri di malam hari sambil merokok menikmati indahnya pagi ;)  
  
[ QUOTE ]  
  
[+] INDONESIANCODER still r0x  
[+] nothing secure ..  
  
`