WooYun.org

2、然后就可以各种登录了

3、然后手动检测发现cookie项存在sql注入问题，这个问题浪费了我点时间

3、然后开始读库结构

读了下这个库结构，各种用户、管理用户，对浙江站的影响应该不小吖
Database: commonzj
[96 tables]
+---------------------------+
| Team_weibo |
| Team_weibo_class |
| Team_weibo_topics |
| Team_weibo_user |
| admin_group |
| admin_group_priv |
| admin_group_user |
| admin_log |
| admin_priv |
| admin_user |
| book_list |
| book_manager |
| book_type |
| borrow_list |
| dm_field |
| dm_interest_list |
| dm_sys_admin |
| dm_user_interest |
| dm_userinfo |
| dm_userlist |
| dm_wb_user |
| dm_wx_user |
| donate_record |
| draw_record |
| draw_v1_event |
| draw_v1_prize |
| draw_v1_result |
| draw_v1_seed |
| dxhd_lovechina_mblog |
| dxhd_lovechina_user |
| dxhd_lovechina_user_win |
| dxhd_smile |
| dxhd_smile_ats |
| event_mblog_v1 |
| fb_article |
| fb_dept |
| fb_dept_list |
| fb_event |
| fb_field |
| fb_user |
| fb_userinfo |
| getnews_news |
| mgt_cmt_list |
| mgt_users |
| mgt_wb_list |
| p_data_macro |
| p_domain |
| p_field |
| p_project |
| p_project_user |
| p_template |
| p_template_user |
| photo_album |
| photo_img |
| photo_user |
| qpb_model |
| sina_zj_event |
| sina_zj_event_pic |
| sina_zj_event_sendmblog |
| sina_zj_event_votes |
| sina_zj_event_votes_count |
| sina_zj_form |
| tbl_1_1 |
| tbl_1_10 |
| tbl_1_11 |
| tbl_1_12 |
| tbl_1_13 |
| tbl_1_14 |
| tbl_1_15 |
| tbl_1_16 |
| tbl_1_17 |
| tbl_1_18 |
| tbl_1_19 |
| tbl_1_2 |
| tbl_1_20 |
| tbl_1_21 |
| tbl_1_3 |
| tbl_1_4 |
| tbl_1_5 |
| tbl_1_6 |
| tbl_1_7 |
| tbl_1_8 |
| tbl_1_9 |
| ticket_list |
| unionpay_record |
| wbxqb_entry |
| wbxqb_gifts |
| wbxqb_msg |
| wf_event |
| wf_project |
| wf_report |
| wf_right |
| wf_user |
| wf_user_info |
| wf_verify |
| yyhd_future_star |
+---------------------------+
Database: commonzj
Table: admin_user
[5 columns]
+-------------+-----------------+
| Column | Type |
+-------------+-----------------+
| site_id | int(3) unsigned |
| status | int(1) unsigned |
| uid | int(10) |
| user_name | char(100) |
| user_passwd | char(100) |
+-------------+-----------------+
只读了一个表的一个用户
uid user_name user_passwd
1 admin e0c59ed5958c918a6ca75636be250bc8 = sdpandsdp
老掉网，就到这里了，不继续渗透了...