let me tell you few things:
1. cbi website had no sql injection vulnerability.
2. you guys will never be able to find out how it was hacked.
3. i challenge the whole IT industry of India to show a POC as to how it was hacked.
4. Thats the reason your CBI+NIC took so many days to bring it...