[iphonejuul]

Target: http://www.runningmyraces.com/event.php?id='189
Host IP: 76.162.0.21
Web Server: Apache
Powered-by: PHP/4.4.9
DB Server: MySQL
Current DB: start6_race
keyword: have
Tables: links
columns: email, id

Target: http://www.swecard.com/news_view.php?id='49
Host IP: 212.97.132.209
Web Server: Apache/1.3.41
Powered-by: PHP/4.4.9
DB Server: MySQL
Current DB: cardswe_db
keyword: have
Tables: news
Columns: title, content, id

Please reply what im doing wrong.
I cant get anything out of these.

[Hackster]

Target: http://www.swecard.com/news_view.php?id='49
Host IP: 212.97.132.209
Web Server: Apache/1.3.41
Powered-by: PHP/4.4.9
DB Server: MySQL
Current DB: cardswe_db
keyword: have
Tables: news
Columns: title, content, id

Please reply what im doing wrong.
I cant get anything out of these.

DB Server: MySQL >=4.1
Selected Column Count is 8
Finding string column
Valid String Column is 2
Current DB: cardswe_db

Their vulnerable for sure...

[iphonejuul]

Please reply what im doing wrong.
I cant get anything out of these.

DB Server: MySQL >=4.1
Selected Column Count is 8
Finding string column
Valid String Column is 2
Current DB: cardswe_db

Their vulnerable for sure...

[/quote]

I cant get any information on admin.
also i cant find admins. i get 404ed

[Savage1101]

try using "havij" program. its very usefull ^^

[iphonejuul]

try using "havij" program. its very usefull ^^

I am using it
Did you try any of these?

[le@rner]

I know you are using havij
there are many tutorials on it search around

[learn3r]

If the MySQL version is below 5(it seems to be 4 in your case), you don't have luxury of information_schema database to enumerate the table names and column names and hence probably these automated tools are not working. I personally always exploit SQLi manually. Remember that makes you better exploiter.