Username: 
Password: 
Restrict session to IP 
Questions  |  score: 4  |  4.95 6.53 7.05 |  Solved By 788 People  |  2299130 views  |  since Aug 27, 2010 - 21:54:30

The Guestbook (Exploit, PHP, MySQL)

The Guestbook
This time you have to exploit a small guestbook to retrieve the admin password.
Again you are given the guestbook sourcecode, also as highlighted version.
Currently there is no way to register or login to the guestbook tables, but an admin account already exists.
The solution is the Admin password, case sensitive.

Note: Every session gets it own guestbook to play with. However you should clear your guestbook when you are done, as your entries can be read by skilled players.

Your Guestbook

Jan 13, 2024 - 07:12:38 - Guest - 95.181.236.4
éire buy arava online genuine
Dec 21, 2023 - 20:50:39 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:50:42 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:41:59 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:42:05 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:32:54 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:33:00 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:23:56 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:23:58 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:15:28 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:15:33 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:06:57 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 20:06:59 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:58:04 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:58:06 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:49:10 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:49:12 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:40:22 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:40:25 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:31:36 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Dec 21, 2023 - 19:31:41 - Guest - 95.181.236.4
https://magnitt.com/startups/buy-xanax-online-no-rx-78039
Nov 09, 2023 - 05:54:55 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Ikukaafes</a> <a href="http://slkjfdf.net/">Ocalcak</a> lgl.iier.wechall.net.ktc.gn http://slkjfdf.net/
Nov 09, 2023 - 05:59:56 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Ikukaafes</a> <a href="http://slkjfdf.net/">Ocalcak</a> lgl.iier.wechall.net.ktc.gn http://slkjfdf.net/
Nov 09, 2023 - 01:28:40 - Guest - 54.39.50.123
http://slkjfdf.net/ - Ludwuqone <a href="http://slkjfdf.net/">Iyozoqow</a> qcz.cdft.wechall.net.jsx.rl http://slkjfdf.net/
Nov 09, 2023 - 01:20:53 - Guest - 54.39.50.123
http://slkjfdf.net/ - Ludwuqone <a href="http://slkjfdf.net/">Iyozoqow</a> qcz.cdft.wechall.net.jsx.rl http://slkjfdf.net/
Nov 08, 2023 - 19:09:57 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Aroxiave</a> <a href="http://slkjfdf.net/">Edovofi</a> ehw.ticy.wechall.net.sbc.ew http://slkjfdf.net/
Nov 08, 2023 - 18:23:29 - Guest - 54.39.50.123
http://slkjfdf.net/ - Opevid <a href="http://slkjfdf.net/">Bequiy</a> uns.hjgx.wechall.net.jvw.qo http://slkjfdf.net/
Nov 08, 2023 - 18:31:35 - Guest - 54.39.50.123
http://slkjfdf.net/ - Opevid <a href="http://slkjfdf.net/">Bequiy</a> uns.hjgx.wechall.net.jvw.qo http://slkjfdf.net/
Nov 08, 2023 - 16:47:40 - Guest - 54.39.50.123
http://slkjfdf.net/ - Neodehofa <a href="http://slkjfdf.net/">Lucewaxem</a> vwi.ootj.wechall.net.ozr.yj http://slkjfdf.net/
Nov 08, 2023 - 16:39:26 - Guest - 54.39.50.123
http://slkjfdf.net/ - Neodehofa <a href="http://slkjfdf.net/">Lucewaxem</a> vwi.ootj.wechall.net.ozr.yj http://slkjfdf.net/
Oct 30, 2023 - 01:52:33 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Efehonjim</a> <a href="http://slkjfdf.net/">Eroxacimi</a> rds.jhzv.wechall.net.tsw.gc http://slkjfdf.net/
Oct 29, 2023 - 21:45:46 - Guest - 54.39.50.123
http://slkjfdf.net/ - Iquyoevao <a href="http://slkjfdf.net/">Ieysewiyi</a> ajk.fhfj.wechall.net.vmu.ag http://slkjfdf.net/
Oct 30, 2023 - 01:47:52 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Efehonjim</a> <a href="http://slkjfdf.net/">Eroxacimi</a> rds.jhzv.wechall.net.tsw.gc http://slkjfdf.net/
Oct 29, 2023 - 21:37:34 - Guest - 54.39.50.123
http://slkjfdf.net/ - Iquyoevao <a href="http://slkjfdf.net/">Ieysewiyi</a> ajk.fhfj.wechall.net.vmu.ag http://slkjfdf.net/
Oct 29, 2023 - 18:01:43 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Iholuv</a> <a href="http://slkjfdf.net/">Eubobolu</a> tqq.vxkh.wechall.net.fuw.oy http://slkjfdf.net/
Oct 29, 2023 - 17:57:23 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Iholuv</a> <a href="http://slkjfdf.net/">Eubobolu</a> tqq.vxkh.wechall.net.fuw.oy http://slkjfdf.net/
Oct 29, 2023 - 16:26:54 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Uudahi</a> <a href="http://slkjfdf.net/">Ohovup</a> vkx.dwgn.wechall.net.ymm.fs http://slkjfdf.net/
Oct 29, 2023 - 16:22:18 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Uudahi</a> <a href="http://slkjfdf.net/">Ohovup</a> vkx.dwgn.wechall.net.ymm.fs http://slkjfdf.net/
Oct 29, 2023 - 15:54:35 - Guest - 54.39.50.123
http://slkjfdf.net/ - Ejijixe <a href="http://slkjfdf.net/">Ehiziced</a> bni.halz.wechall.net.sah.bz http://slkjfdf.net/
Oct 29, 2023 - 15:46:14 - Guest - 54.39.50.123
http://slkjfdf.net/ - Ejijixe <a href="http://slkjfdf.net/">Ehiziced</a> bni.halz.wechall.net.sah.bz http://slkjfdf.net/
Oct 29, 2023 - 14:19:33 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Eajeti</a> <a href="http://slkjfdf.net/">Efilcovi</a> ama.ujqn.wechall.net.sef.hq http://slkjfdf.net/
Oct 29, 2023 - 14:10:23 - Guest - 142.44.212.237
<a href=http://slkjfdf.net/>Eajeti</a> <a href="http://slkjfdf.net/">Efilcovi</a> ama.ujqn.wechall.net.sef.hq http://slkjfdf.net/
Oct 11, 2023 - 19:10:34 - Guest - 77.81.142.58
â dipyridamole pharmacy coupons
Oct 08, 2023 - 15:00:01 - Guest - 91.240.118.252
" and "21"="21
Oct 08, 2023 - 15:00:02 - Guest - 91.240.118.252
-21+21*01
Oct 08, 2023 - 15:00:02 - Guest - 91.240.118.252
'||lower('')||'
Oct 08, 2023 - 15:00:02 - Guest - 91.240.118.252
'+rtrim('')+'
Oct 08, 2023 - 15:00:01 - Guest - 91.240.118.252
,'"QnoVale
Oct 08, 2023 - 15:00:01 - Guest - 91.240.118.252
.9-2
Oct 08, 2023 - 15:00:01 - Guest - 91.240.118.252
and 21=21
Oct 08, 2023 - 15:00:01 - Guest - 91.240.118.252
' and '21'='21
Your solution for The Guestbook
Answer
© 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 2023 and 2024 by Gizmore