Screenshot:



More here: http://blog.insecurity.ro/sql-injection-column-finder-in-php-%C2%A9-isr/

Online Tool: http://insecurity.ro/columnsfinder.php

Source Code: http://www.teamwork.insecurity.ro/xfiles/%5BPHP%5D-ISR-SQL-Injection-Column-Finder---v1.0--Public-Version-.ISR


Website for testing: http://www.beckerturm-immobilien.de/images.php?id=134

Bonus: The result it's text + audio, you must listen this! ))

You can use google translate, to understand romanian language!

I could speak in Romanian, but isn't a international language like English.
Everyone know this language.

The important thing, it's what I posted, not these things!

the webpage is infected by a troyan

This is a false positive ... your antivirus may see the source code encoded in base64 and gives the alert of a trojan or infected file.

You can decode it if you want to check it out.. and if you can find any suspicious code inside then you are MY MASTER.

Yeah the webpage, where you saw a .exe? =))