Waraxe Forums

frisco · Beginner

Searching throught several web I usually surf I have found a SQL injenction vuln but it is in a propietary software so I dont know how the hell get data for another table behind the one that is used in the query.

The site is running with php and mysql and without I think that phpuser doesn't have any privileges on the mysql.* tables becouse after checking the number of atributes of the query and finding some strings that will be visible on the final page selecting atributes from mysql.user table only lead me to mysql_fetch_array() errors (this is the only error I can see).

Any ideas or comments.

For you interest the link is:

http://www.ciber-rebellion.com/tiendarebel/verampliacion.php?idAmpl=10 LIMIT 0,1 UNION SELECT null,user,password,1,2,1,1,1,1,null,null,null,null from mysql.user/*

Its a spanish webpage and found mysql version is 4.0.20