SQL found need to login as admin !!

[Pessw]

Guys i found error of SQL in login page and the username is an email after i tested i got that error

Error Number: 1064



You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '@fff.com' AND password = '8747806a4531e9d4a4c0726bba70671a977ab7c2'' at line 1



SELECT users.*, user_types.user_type as the_type FROM users INNER JOIN user_types ON users.user_type = user_types.id WHERE user_name = 'as+as'@fff.com' AND password = '8747806a4531e9d4a4c0726bba70671a977ab7c2'



Filename: models/Database_model.php



Line Number: 51

I need help to login as admin do not say use sqlmap due too slow and disconnection, what i should write in username blank to access as admin ?

 

[X-Ware]

You made a mistake with the section , this is a commercial section , a ansver for your question username in you: "@fff.com" or "as+as'@fff.com" and password hash: "8747806a4531e9d4a4c0726bba70671a977ab7c2" , password hash is not the password itself , you need to decrypt it yet , for example here: http://xssforum7mmh3n56inuf2h73hvhnzobi7h2ytb3gvklrfqm7ut3xdnyd.onion/threads/7935/

 

[Pessw]

You made a mistake with the section , this is a commercial section , a ansver for your question username in you: "@fff.com" or "as+as'@fff.com" and password hash: "8747806a4531e9d4a4c0726bba70671a977ab7c2" , password hash is not the password itself , you need to decrypt it yet , for example here: http://xssforum7mmh3n56inuf2h73hvhnzobi7h2ytb3gvklrfqm7ut3xdnyd.onion/threads/7935/

Who wrote the password is me and not correct password but the injection has been succeed, so we missing something to could login as admin

 

[breakarule]

PM me the details, I can help you to learn it.

 

[G1fl3x]

try: admin'-- or something like this, you also can get usernames from users table, with UNION query

 

[Pessw]

try: admin'-- or something like this, you also can get usernames from users table, with UNION query

username is an email